From shaheryarkh@gmail.com Sat Aug  2 03:33:28 2014
From: Muhammad Shahzad <shaheryarkh@gmail.com>
To: sr-dev@lists.kamailio.org
Subject: Re: [sr-dev] [SR-Users] Obscuring SIP traffic and using with NoSIP
Date: Sat, 02 Aug 2014 06:33:01 +0500
Message-ID:
 <CAFZQphzhW+PHHYVAFP+ooX7TrFf+9gt1LbkLozQQmGyfLbYerg@mail.gmail.com>
In-Reply-To:
 <CAFZQphwNvTaT-Qzh3SCqywd+9bVh6ycqPYgyMj9rkFB2s6Gf2w@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2083561786=="

--===============2083561786==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

OK, i realize my mistake, SREV_NET_DATA_IN event is processed before
msg->rcv info is set. This is kind of nice since we get completely raw
message direct from receive socket. :)

Thank you.




On Fri, Aug 1, 2014 at 5:49 AM, Muhammad Shahzad <shaheryarkh(a)gmail.com>
wrote:

> OK, so writing kamailio module was fun and easy. All thanks to
> Daniel-Constantin for providing very useful hints, it took hardly 2-3 hours
> to write up a functional module that exposes data received on kamailio
> socket and data that is about to be sent out, in an event route, where it
> can be manipulated e.g. to encode and decode per custom encryption
> algorithms defined by script writer. Here is bleeding edge code,
>
> http://webrtc.voip-demos.com/obfuscate.c.txt
>
> Most of the code is borrowed from topoh, nosip and msrp modules and works
> fine. There is just one little problem, that is unlike nosip module, the
> event route for obfuscate module gives error when i try to print source
> address using $si and $sp variables.
>
> Here is an example kamailio.cfg
>
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> loadmodule "nosip.so"
> loadmodule "obfuscate.so"
>
> ...
>
> event_route[nosip:msg] {
>     xlog("L_INFO", "[$pr:$si:$sp]: Received nosip message '$mb' \n");
> }
>
> event_route[obfuscate:msg] {
>     if (is_msg_obfuscated()) {
>         xlog("L_INFO", "[$pr:$si:$sp]: Received obfuscated message '$mb'
> \n");
>         $avp(msg) =3D $mb;
>     } else {
>         xlog("L_INFO", "[$pr:$dd:$dp]: Sending obfuscated message '$mb'
> \n");
>         $avp(msg) =3D $mb;
>     };
> }
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>
>
> using telnet when i send some random junk i get following in kamailio logs,
>
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> webrtc[13284]: : pv [../../parser/../ip_addr.h:669]: ip_addr2sbuf(): BUG:
> ip_addr2sbuf: unknown address family 0
> webrtc[13284]: INFO: <script>: [NONE::0]: Received obfuscated message
> 'lkasndkasldnaklsndklaskndklasnkldnasklndklasndlkasndkasndlkasnkldanskldnas=
lkdnlkasndlkasnldnaskdnlasdn#015#012#015#012'
>
> webrtc[13284]: INFO: <script>: [tcp:192.168.100.11:55206]: Received nosip
> message
> 'lkasndkasldnaklsndklaskndklasnkldnasklndklasndlkasndkasndlkasnkldanskldnas=
lkdnlkasndlkasnldnaskdnlasdn#015#012#015#012'
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>
>
> Can you guys give any hint, what is wrong here? The "received msg" code is
> almost identical to nosip module yet, nosip module is able to show $si and
> $sp values while my module can not.
>
> Also is it possible to expose destination socket address (ip + port) for
> "sent msg" (i.e. the destination socket where kamailio is about to send
> some sip message).
>
> Thank you.
>
>
>
>
> On Thu, Jul 31, 2014 at 4:38 PM, Muhammad Shahzad <shaheryarkh(a)gmail.com>
> wrote:
>
>> Thanks for good insight in to this topic.
>>
>> As mentioned in my first email, there are a number of reasons for trying
>> out custom encryption schemes. Low-end android devices is just one of them.
>> There is a huge market for low-end android devices in south and south east
>> Asia for example, where over 35% of world population lives. The people
>> there are poor and don't have much understanding of latest cutting edge
>> smart devices and related technologies. Big brands like Apple, Samsung,
>> Nokia etc. are virtually non-existent or have so high price that people
>> simply can't afford them. So cheap Chinese and Indian cell phones which
>> barely run Android are considered "smart phones" and are very popular here.
>> Using SSL, TLS, DTLS etc. are nightmare on these devices.
>>
>> The other reasons to develop and try out custom encryption algorithms are
>> voip blockage by GSM providers in various Middle Eastern and European
>> counties,
>>
>> http://www.linphone.org/news/11/26/Linphone-over-3G.html
>> http://xerocrypt.wordpress.com/2012/07/06/inspecting-your-packets/
>>
>> http://www.telecomrecorder.com/world-premium-telecom/pak-telecom-authority=
/pta-and-ip-blocking/
>>
>> And the rogue agencies of evil empires,
>>
>> http://en.wikipedia.org/wiki/Five_Eyes
>> http://en.wikipedia.org/wiki/PRISM_%28surveillance_program%29
>>
>> http://en.wikipedia.org/wiki/Booz_Allen_Hamilton#Activities_in_foreign_cou=
ntries
>>
>> http://www.itv.com/news/update/2013-09-06/report-us-and-uk-agencies-cracke=
d-encryption-codes/
>>
>> Nearly all encryption algorithms are defined and advocated by US and UK
>> intelligence agencies and it is quite obviously possible that they either
>> have crack or backdoors into them. So, we can't blindly trust them anymore
>> and should look into defining our own algorithms and security standards.
>>
>> Just to note, i don't claim that ITV or any other custom encryption
>> discussed here can or would resolve all these problems. The main focus is
>> on trying something new and out of the box to improve the voip and network
>> security conditions. I find Kamailio as open source SIP server and doubango
>> as open source SIP SDK as best platforms for these efforts and
>> experimentation.
>>
>> Thank you.
>>
>>
>>
>>
>> On Thu, Jul 31, 2014 at 2:08 PM, Daniel Tryba <daniel(a)pocos.nl> wrote:
>>
>>> [remove dev from cc]
>>>
>>> > The key purpose of ITV encryption is to avoid making a pattern of any
>>> sort.
>>>
>>> The pattern is in SIP itself, regardless of encryption.
>>>
>>> -OPTIONS keepalives and response at regular intervals of nearly fixed
>>> size.
>>> -INVITE and its predictable responses of nearly fixed sizes per type
>>> followed
>>> by a steady stream of upd on random ports with the same bandwidth
>>> flowing both
>>> sides.
>>>
>>> Unless this random utp traffic is encrypted it is obvious you are using
>>> rtp
>>> with something like SIP. Even if it is encrypted the symmetric streams
>>> give
>>> away clues. A simple xor isn't enough, silences will result in the same
>>> pattern.
>>>
>>> Daniel(-Constanting) already suggested interval randomizing (which is to
>>> be
>>> applied to any response) and padding of all data.
>>>
>>> But I wouldn't trust any non vetted encryption scheme, it is much easier
>>> to
>>> fix timing/padding with the standard tls scheme. Which brings me to the
>>> question: what kind of device on the market capable of running apps
>>> isn't fast
>>> enough for TLS?
>>>
>>> _______________________________________________
>>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>>> sr-users(a)lists.sip-router.org
>>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>>
>>
>>
>



--===============2083561786==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0
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--===============2083561786==--