Skip to content
uencoder

SRTP

SRTP (Secure RTP, RFC 3711) provides encryption, authentication, and replay protection for RTP/RTCP, encrypting the payload with AES-CM and authenticating with HMAC-SHA1.

Purpose

It gives real-time media confidentiality, integrity, and replay protection, and it is the mandatory media security protocol in WebRTC.

Mechanism

The RTP payload is encrypted with AES-CM (counter mode); the RTP header and extensions are authenticated with HMAC-SHA1 (truncated to 10/4 bytes). Sequence numbers drive replay protection, and keys are negotiated by DTLS-SRTP.

Use cases

  • WebRTC media encryption
  • Secured VoIP calls
  • Video conferencing encryption

Related tools

References