RFC 3711:The Secure Real-time Transport Protocol (...
RFC-Ref

replay protection


Click on the red underlined text to get to the source

... can provide confidentiality, message authentication, and replay protection to the RTP traffic and to the control traffic ...


... RTP header and payload, and it indirectly provides replay protection by authenticating the sequence number. Note that the MKI ...
... receiver only (when authentication and replay protection are provided), containing indices of recently received and authenticated SRTP packets ...
... SRTCP packet, * a separate replay list is maintained (when replay protection is provided), ...
... 5. For message authentication and replay protection, first check if the packet has been replayed (Section 3.3.2), using the Replay List and the index as determined in Step 2. If the packet is ...
... the cryptographic context as in Section 3.3.1, using the packet index estimated in Step 2. If replay protection is provided, also update the Replay List as described in Section 3.3.2. ...
... i.e., not all of the index is explicitly carried in the SRTP packet. For the pre-defined transforms, the index i is used in replay protection (Section 3.3.2), encryption (Section 4.1), message authentication (Section 4.2), and for the key derivation ...
... Replay Protection ...
... Secure replay protection is only possible when integrity protection is present. It is RECOMMENDED to use replay protection ...
... replay protection is only possible when integrity protection is present. It is RECOMMENDED to use replay protection, both for RTP and RTCP ...
... and authenticated. In practice, the list can use a "sliding window" approach, so that a fixed amount of storage suffices for replay protection. Packet indices which lag behind the packet index in the context by more than SRTP ...
... * SRTCP replay protection is as defined in Section 3.3.2, but using the SRTCP index as the index i and a separate Replay List that is ...



Google
Web
RFC-Ref