AES not standardized?

[MACC the AVCOtek]

Is it true that AES has not been standardized for VTC? Does this mean that the only guaranty I have of a call being encrypted is to use same vendor equipment?

Does anybody know when standardization might happen or where I can go to learn more?


Mahalo!

[cedi]

Hi.

AES is standardised.
You don't need to use equipment of only one vendor to use AES. Since AES v3 was released, all major vendors adopted it.

Tandberg was first to introduce AES (v2), other vendors followed, but used their proprietry solutions AES*. That wasn't interoperable.
Now they all support AES v3.

To be sure, you have to know the SW version of the codec.
To be really sure you have to test it live. :-)

Hope it helps,
BR,
Cedi

[Sean Lessman]

Hi.

AES is standardised.
You don't need to use equipment of only one vendor to use AES. Since AES v3 was released, all major vendors adopted it.

Tandberg was first to introduce AES (v2), other vendors followed, but used their proprietry solutions AES*. That wasn't interoperable.
Now they all support AES v3.

To be sure, you have to know the SW version of the codec.
To be really sure you have to test it live. :-)

Hope it helps,
BR,
CediH.235 specifies encryption and security over H.323 and H.233 specifies encryption over ISDN. AES is just one of the possible encryption methods you can use. As with any standard, H.235 is updated regularly (i.e. H.323 version 2,3,4,5 etc). H.235 version 2 was indeed a standard and then was improved upon when version 3 of the standard was released.

H.234 specifies the key exchange.

It is not correct to say that version 2 of the H.235 standard was proprietary. At the time of TANDBERG's first implementation, version 2 was the current revision of the standard. We have since improved support to support both v2 and v3 in all of the endpoints.

www.itu.org (http://www.itu.org) is a good place to start, but you must buy the documents if you want them.

Sean

Sean