SKYPE SECURITY EVALUATION 1. Introduction and Summary

Short Description
Skype makes wide use of cryptography to authenticate user and server identities, … of its intelligent and correct use of cryptography toward these ends. …

Website: www.skype.com | Filesize: 88kb

Content
1
SKYPE SECURITY EVALUATION Tom Berson Anagram Laboratories 18 October 2005 berson@anagram.com skype:tomnd2t
1. Introduction and Summary
I have been a Skype user since August 2004. My 35-year long career as cryptographer and computer security expert has taught me to be professionally skeptical about the security of almost everything, especially of a system which is as adept as Skype at getting through typical network defenses. So I re-formatted the hard disk on a spare computer and dedicated the box to the Skype application. Over the next few months I monitored the list of processes running on the machine, looking for anything suspicious. I also ran a number of experiments during which I captured and analyzed the packets flowing into and out of the box. I was looking for malicious activity and trying to figure out how Skype works. Perhaps you have run similar experiments yourself.
You may imagine my delight when, in April 2005, Skype contacted me and invited me to compete for the job of performing an independent evaluation of Skype information security, with a special focus on the Skype cryptosystem. I traveled to the Skype engineering center in Tallinn, and to the Skype…

Get the file Download here