Capture Voicestream to encrypt calls

[AddeBC]

Is there anyone who has done this, kind of like recording the phonecall... Though my query is slightly more advanced, I would like to see a Crypto program creating secure phonecalls using WM5...

So we would need to capture the datastream incoming(to decrypt) and outgoing to crypt, this creating a nice safe way to talk to your...friends... Anyone else up for this project?

Or any feedback on the concept?

[AddeBC]

i dont think its only me intrested in this so ill send this source code aswell from a company that works from a PC via isdn... This company sells cellphones with encryption...

http://www.cryptophone.de/support/downloads/downloads.html

Dont know if this could help in the initial stage?


Ps.
A similar software does exist (180 dollars per phone + all your details are sent to australian gov) www.securegsm.com

Anyone up for the task?

[mamaich]

it is impossible to intercept the audio data coming through PPC unless your hardware is specially designed for it and it provides you a specialized API for doing that. All crypting software encrypts calls via doing CSD calls and senging data. There is another program - www.cryptophone.de

[DanielS]

this looks like a HTC anyway...

http://www.cryptophone.de/products/CP220/index.html

[AddeBC]

Then how can secureGSM do it in a software made for any WM5?

So theoretically i dont think there is a problem there....

[vijay555]

SecureGSM is an end to end app, which I suppose all such apps would have to be.

As such, it almost certainly doesn't need to pick up the phone/modem audio path (which as Mamaich says, seems to be impossible without a particular hardware implementation (http://forum.xda-developers.com/viewtopic.php?t=40100&highlight=poll)), but just use the normal microphone and loudspeaker recording/playback functions.

V

[rain]

AddeBC,
Vijay is right. SecureGSM is working on the same principal as criptophone.
Establish a modem connection between two devices running the same software run a negociation with the network (v.110 is much faster then v.32) start a data connection with the other dude...the stream that the mic receives is encrypted and sent over to the other party there the software decrypts the stream and plays it troughout the speaker.
There were quite a few threads regarding csd connections between phones so could start from there.
The only thing that you're going to miss in this deal is the logistic for selling the software + phone.
Cheers,
Raul

[OdeeanRDeathshead]

I often thought of adding this as a feature of GSMbeam but I just can't think when I would ever really need it. It would be cool to communicate without the possibility of Big Brother knowing what is said, but what would you say?

To sell this kind of software may also bring you in contact with undesirable groups, criminals or terrorists are propably in need of good voice call encryption.

To do this it will have to have a reletively low quality of sound because of the poor data rate on voice calls. How would one go about encoding the sound to data? Are there any off the shelf open ended codecs for this purpose or would the work need to be done from scratch?

[superduper]

......To sell this kind of software may also bring you in contact with undesirable groups, criminals or terrorists are propably in need of good voice call encryption....




as per SecureGSM FAQ:

http://www.securegsm.com/pages.php?pageid=16#4


Is your software designed to support criminals and terrorists?

Absolutely not! We do not condone any such activities, and take extreme care to ensure that our products are used to prevent, rather than encourage criminal or terrorist behavior.


AddeBC

A similar software does exist (180 dollars per phone + all your details are sent to australian gov)


End User Details are being collected as part of identity verification procedure.
First name, Second Name, living address, phone number and contact email address. I suppose, this is standard practice. We do not support criminals and terrorists and would not sell if in doubt.. At the same time our software does just what is says to do: encrypts phone conversation end to end to the military standards and beyond.
It is buyer's resposibility to provide correct information on the order form.
see this page for details:

http://www.securegsm.com/pages.php?pageid=26

Also, I suppose providing end user information to the Australian Government does not automaticaly lead to the conclusion that SecureGSM is flawed or insecure, has master key, back door or leaving any other way to interfere with contents of SecureGSM encrypted conversation. And no! Big Brother does not know what is said.. :)

[OdeeanRDeathshead]

Any way, if terrorists or any of the countries listed there want call encryption they would not trust their lives to someone elses software. I am sure they are smart enough to write their own.

As for the laws governing the sale, that just makes me mad. I do not trust John Howard, I think I should have the right to a private conversation without registering it with him. I guess that is the beauty of computers. Computers make the world go round and its the size of your brain that gets results not politics.

[hanmin]

Well, for a less.. 'big brother-ish' scenario, I would, personally like to have my line phone to be encrypted, as it is way much easier to have someone bugging your phone line.

However, for a cell/mobile phone, it is relatively difficult for amateur people to bug it, right? What are the chances that someone around you that is interested on your conversations, is capable of intercepting your mobile/cell phone calls.

[sub_rosa25]

Raseac Secure Phone - for WM 2003 and WM 2003 SE

This looks worthwhile! Downloads are available from the website for testing.

[Also, as a side note, I have been in touch with Phil Zimmermann, the creator of PGP, and lately of Zfone (crypto SIP phone for XP/Linux/Mac), and he says he realizes the importance of the Pocket PC platform and is considering ways of implementing Zfone for Pocket PC.]

http://www.raseac.com.br/

Encryption system for end-to-end secure voice communication. It was developed to be used in palmtop computers running Microsoft PocketPC 2003 e 2003SE (Intel).

When installed in a palmtop connected via modem to a telephony system (fixed or mobile), it allows your company and your business a secure means of communication anywhere around the world.

Since Raseac encryption technology was developed for high capacity processors, it allowed for the implementation of state of the art security, featuring:

* Exceptional sound quality;
* 256-bit encryption key;
* Encryption technology based on the Rijndael block cipher (AES);
* CBC, Random IV, Time Stamp, Integrity check by MAC/SHA-256;
* 100% protected against "man in the middle attack";
* No backdoor.

[KMur]

Well, I'd say that common people don't have much to worry about being tapped... Usually, nothing that sensitive is talken EVER over line.

Things begin to change when you are involved with something sensitive, be that legal or not. Most of the guies who work with corps, above management level may have some need from time to time, to be contacted that way by a superior. From director and up, depending on what kind of business the company is into, it IS a must!

People who work with security, government and other agencies may need it. As already said, people who work with barely legal to blatantly criminal stuff are always in need of such trappings. I think terrorists end-up on that class. :)

Equipment, hard and soft is always expensive and cost prohibitive for most of us.

Paranoid, techno-junkies and just curious people may want it, just to have.

Since I fit two or three of the said categories, I would like to put a program like that on my cell phone... :D

Just for the sake of having it there!:cool:

(mind you! Curious, telecom and management+ position...)

That said, a basic voice scramble-de-scramble program is OK for me!!! :o
(the more open-source, the better!)

About the brazilian company, they changed the site's name to secvoice. I tried to have a look-see on their specs but they ignored my e-mail and so I've done with it.