RFC 3711 - The Secure Real-time Transport Protocol (SRTP)

• 状态: Proposed Standard
• 发布日期: March 2004
• Stream: IETF
• 勘误: 无勘误

---

Abstract (摘要)

本文档描述了 Secure Real-time Transport Protocol (安全实时传输协议, SRTP), 它是 Real-time Transport Protocol (实时传输协议, RTP) 的一个配置文件 (profile), 可以为 RTP 流量以及 RTP 的控制流量 Real-time Transport Control Protocol (实时传输控制协议, RTCP) 提供机密性、消息认证和重放保护。

Contents

• 1. Introduction (简介)
  • 1.1. Notational Conventions (符号约定)
• 2. Goals and Features (目标和特性)
  • 2.1. Features (特性)
• 3. SRTP Framework (SRTP 框架)
  • 3.1. Secure RTP (安全 RTP)
  • 3.2. SRTP Cryptographic Contexts (SRTP 密码上下文)
    • 3.2.1. Transform-independent parameters (与变换无关的参数)
    • 3.2.2. Transform-dependent parameters (与变换相关的参数)
    • 3.2.3. Mapping SRTP Packets to Cryptographic Contexts (将 SRTP 数据包映射到密码上下文)
  • 3.3. SRTP Packet Processing (SRTP 数据包处理)
    • 3.3.1. Packet Index Determination, and ROC, s_l Update (数据包索引确定和 ROC、s_l 更新)
    • 3.3.2. Replay Protection (重放保护)
  • 3.4. Secure RTCP (安全 RTCP)
• 4. Pre-Defined Cryptographic Transforms (预定义密码变换)
  • 4.1. Encryption (加密)
    • 4.1.1. AES in Counter Mode (计数器模式下的 AES)
    • 4.1.2. AES in f8-mode (f8 模式下的 AES)
    • 4.1.3. NULL Cipher (空密码)
  • 4.2. Message Authentication and Integrity (消息认证和完整性)
    • 4.2.1. HMAC-SHA1
  • 4.3. Key Derivation (密钥派生)
    • 4.3.1. Key Derivation Algorithm (密钥派生算法)
    • 4.3.2. SRTCP Key Derivation (SRTCP 密钥派生)
    • 4.3.3. AES-CM PRF
• 5. Default and mandatory-to-implement Transforms (默认和强制实现的变换)
  • 5.1. Encryption: AES-CM and NULL (加密: AES-CM 和 NULL)
  • 5.2. Message Authentication/Integrity: HMAC-SHA1 (消息认证/完整性: HMAC-SHA1)
  • 5.3. Key Derivation: AES-CM PRF (密钥派生: AES-CM PRF)
• 6. Adding SRTP Transforms (添加 SRTP 变换)
• 7. Rationale (基本原理)
  • 7.1. Key derivation (密钥派生)
  • 7.2. Salting key (加盐密钥)
  • 7.3. Message Integrity from Universal Hashing (通过通用散列实现消息完整性)
  • 7.4. Data Origin Authentication Considerations (数据源认证考虑)
  • 7.5. Short and Zero-length Message Authentication (短消息和零长度消息认证)
• 8. Key Management Considerations (密钥管理考虑)
  • 8.1. Re-keying (重新密钥)
    • 8.1.1. Use of the <From, To> for re-keying (使用 <From, To> 进行重新密钥)
  • 8.2. Key Management parameters (密钥管理参数)
• 9. Security Considerations (安全考虑)
  • 9.1. SSRC collision and two-time pad (SSRC 冲突和两次一密)
  • 9.2. Key Usage (密钥使用)
  • 9.3. Confidentiality of the RTP Payload (RTP 有效载荷的机密性)
  • 9.4. Confidentiality of the RTP Header (RTP 头部的机密性)
  • 9.5. Integrity of the RTP payload and header (RTP 有效载荷和头部的完整性)
    • 9.5.1. Risks of Weak or Null Message Authentication (弱认证或空认证的风险)
    • 9.5.2. Implicit Header Authentication (隐式头部认证)
• 10. Interaction with Forward Error Correction mechanisms (与前向纠错机制的交互)
• 11. Scenarios (场景)
  • 11.1. Unicast (单播)
  • 11.2. Multicast (one sender) (组播（单个发送者）)
  • 11.3. Re-keying and access control (重新密钥和访问控制)
  • 11.4. Summary of basic scenarios (基本场景总结)
• 12. IANA Considerations (IANA 考虑)
• 13. Acknowledgements (致谢)
• 14. References (参考文献)
  • 14.1. Normative References (规范性参考文献)
  • 14.2. Informative References (信息性参考文献)
• Appendix A. Pseudocode for Index Determination (附录 A. 索引确定的伪代码)
• Appendix B. Test Vectors (附录 B. 测试向量)
  • B.1. AES-f8 Test Vectors (AES-f8 测试向量)
  • B.2. AES-CM Test Vectors (AES-CM 测试向量)
  • B.3. Key Derivation Test Vectors (密钥派生测试向量)
• Authors' Addresses (作者地址)