Encryption methodologies for SimplyVideo

All of our calls have various levels of encryption across them to keep them secure from start to finish. Take a look at an overview of our encryption below.

SimplyVideo nodes
All communication links between the SimplyVideo Management Node and SimplyVideo Conferencing Nodes, and between Conferencing Nodes, use an IPsec transport with the following settings:

256-bit AES-GCM for encryption
a 4096 bit Diffie-Hellman modulus for key exchange.
No other ciphers, hashes or moduli are permitted.

These settings apply to both the initial channel set up for key exchange (ISAKMP) and the secondary channel over which application data is transported (ESP).

Inter-node traffic is restricted to only protocols that are expected for the successful operation of the SimplyVideo platform, including but not necessarily limited to call signaling, media, status, and configuration information. Any unexpected traffic/protocols are dropped.

Endpoints
Encrypted connections between SimplyVideo and endpoints use:

AES 128-bit or 256-bit encryption for media
TLS for SIP call control
SRTP for SIP media
H.235 for H.323 media

SimplyVideo (web/desktop/mobile) clients use:

HTTPS TLS for signaling
DTLS-SRTP for WebRTC media

Updated on: 14/01/2022