Recovering SDES-keyed SRTP media from a capture first requires decrypting the SIP-over-TLS signaling that carries the SDP keys, so TLS decryption limits also bound media analysis.
inferred · Checked 2026-09-24
- Vendor
- IETF
- Product
- SDES
- Subsystem
- SRTP keying
- Deployment
- any
- Region
- not restricted
- Release range
- RFC 4568
- Status
- inferred
- Checked
- 2026-09-24
Sources
- RFC 4568: Session Description Protocol (SDP) Security Descriptions for Media Streams — IETF / RFC Editor · tier 1 standards and regulators · Sections 6.1 and 8.3 combined with the Wireshark TLS wiki key log section
Cite this note
APA
WarmTransfer. (2026, September 24). SIP capture and analysis with Wireshark and sngrep and HOMER: source note sip-capture-analysis-srtp-needs-sip-tls-first. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-capture-analysis-srtp-needs-sip-tls-first
BibTeX
@misc{warmtransfer-claim-sip-capture-analysis-srtp-needs-sip-tls-first,
title = {SIP capture and analysis with Wireshark and sngrep and HOMER: source note sip-capture-analysis-srtp-needs-sip-tls-first},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-capture-analysis-srtp-needs-sip-tls-first},
note = {Source note sip-capture-analysis-srtp-needs-sip-tls-first, checked 2026-09-24}
}