SRTP with SDES

SRTP (Secure Real-time Transport Protocol) with SDES (Session Description Protocol Security Descriptions) is a method for securing real-time multimedia communications, such as VoIP and video conferencing. It combines SRTP, which provides encryption, authentication, and integrity for RTP media streams, with SDES, a mechanism for exchanging cryptographic keys and parameters within SDP messages during session setup. This approach enables secure end-to-end media transmission without requiring a separate key management protocol like DTLS-SRTP.

Also known as: Secure RTP with SDES, SRTP/SDES, RTP Security with SDES, SDP Security Descriptions, Session Description Security

Why learn SRTP with SDES?

Developers should learn SRTP with SDES when building or maintaining real-time communication systems that need lightweight security without complex key exchange setups, such as in SIP-based VoIP applications or legacy systems. It's particularly useful in scenarios where DTLS-SRTP is not feasible due to compatibility constraints or when simplicity in key management is prioritized, though it's less secure than DTLS-SRTP due to in-band key transmission.

Learning Resources

• docs: RFC 4568: Session Description Protocol (SDP) Security Descriptions for Media Streams
• docs: RFC 3711: The Secure Real-time Transport Protocol (SRTP)
• docs: MDN Web Docs: WebRTC security
• tutorial: Real-Time Communication with WebRTC: Secure Communication
• docs: Cisco: SRTP and Key Management