Page History

Crypto Suite profile is used to negotiate cryptographic algorithms when establishing unicast media streams involving Secure RTP/RTCP. The 

• unauthenticatedSRTP—Signals that the SRTP packet payloads are not authenticated.
• unencryptedSRTP—Signals that the SRTP packet payloads are not encrypted.
• unencryptedSRTCP—Signals that the SRTCP packet payloads are not encrypted.

By default, SRTP and SRTCP packet payloads are both authenticated and encrypted. The SRTP specification requires the use of message authentication for SRTCP, but not for SRTP. Use of unauthenticatedSRTP is not recommended. 

Command Syntax

% set profiles security cryptoSuiteProfile <profile name> 
	entry <priority> 
	cryptoSuite <cryptoSuite> 
	sessionParameterFlags <sessionParameterFlags> 

% show profiles security cryptoSuiteProfile <cryptoSuiteProfile> displaylevel <displaylevel> 

% delete profiles security cryptoSuiteProfile <cryptoSuiteProfile>

Command Parameters

The Crypto Suite Profile Parameters are as shown below:

Command Example

% show profiles security cryptoSuiteProfile 
cryptoSuiteProfileTest DEFAULT  {
     entry 1 { 
	cryptoSuite AES-CM-128-HMAC-SHA1-80; 
	sessionParameterFlags { 
	    unencryptedSRTCP enable; 
	    unencryptedSRTP enable; 
	    unauthenticatedSRTP enable; 
        } 
    } 
}