Feeds

Crypto boffins smuggle secret messages in silent Skype calls

Masquerades as normal VoIP traffic

Beginner's guide to SSL certificates

Polish security researchers have come up with a cunning method to transmit hidden messages using the silence packets transmitted during a Skype call.

The VoIP service transmits voice data in 130-byte packets, and silences in 70-byte packets, a difference that creates a potential means to conceal a hidden encrypted message in the latter. The novel form of steganography was devised by Wojciech Mazurczyk, Krysztof Szczypiorski and Maciej Karaœ, researchers at the Institute of Telecommunications of the Warsaw University of Technology.

The crypto boffins developed an application, dubbed SkypeHide (or SkyDe), that embeds an encrypted message using structured sequences of silent packets. The same software running on a receiving computer is used to extract the concealed message.

Hidden messages can contain text, audio or video content, although the maximum transmission rate of 1kbps would more or less preclude the practical transmission of video clips. Packets generated by SkypeHide Would be difficult to distinguish from normal Skype traffic, Trusted Third Party (via Google Translate) reports.

The latest technique builds on earlier research by Mazurczyk and Szczypiorski into steganography using VoIP streams. Four years ago the researchers developed techniques for using unused fields in the RTCP (Real-Time Control Protocol) and RTP (Real-Time Transport Protocol) VoIP protocols to transmit hidden messages.

The researchers hope to present more about the technology at 1st ACM Workshop on Information Hiding and Multimedia Security conference in Montpellier, France, in June. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
Webcam hacker pervs in MASS HOME INVASION
You thought you were all alone? Nope – change your password, says ICO
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
USB coding anarchy: Consider all sticks licked
Thumb drive design ruled by almighty buck
Attack reveals 81 percent of Tor users but admins call for calm
Cisco Netflow a handy tool for cheapskate attackers
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Reducing the cost and complexity of web vulnerability management
How using vulnerability assessments to identify exploitable weaknesses and take corrective action can reduce the risk of hackers finding your site and attacking it.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.