Skype won't say if it decrypts VoIP calls

Company may keep keys so authorities can decrypt encrypted VoIP phone calls.

The encryption of Skype VoIP phone calls might not be as secure as you think.

It's possible the company keeps keys so law enforcement authorities can decrypt encrypted VoIP phone calls, a report says, but Skype won't say for sure one way or the other.

According to an online report, Austrian officials with legal authority to tap VoIP phone communications have no problem listening in on Skype calls, which are encrypted as a standard part of Skype service.

A Skype spokesman wouldn't say whether Skype keeps keys to decrypt calls. "Sorry, Skype does not comment on media speculation," says Skype vice president Chiam Haas.

It's virtually impossible to figure out for sure from independent research whether Skype keeps encryption keys or not, says David Endler, chairman of Voice Over IP Security Alliance and senior director of security research at Tipping Point.

"No one has shown it publicly," he says. "Skype is a closed software package, essentially a black box." The company has on rare occasions allowed outside researchers to examine and verify the security of its encryption, but not whether the keys that can crack the encryption can be retrieved, he says.

To allay fears that the calls might not be secure from law enforcement, Skype should open its platform to evaluation by trusted, credible industry experts, he says.

Endler says it's equally difficult to know whether commercial VoIP vendors leave open the possibility of turning encryption keys over to law enforcement.

In the United States, the Communications Assistance for Law Enforcement Act (CALEA) forbids requiring that vendors build in back-door decryption, says Jim Dempsey, vice president for public policy at the Center for Democracy & Technology. "CALEA expressly forbids requiring anyone to be able to decrypt anything," he says.

But that doesn't mean they don't build in key-retrieval anyway. Dempsey says there are no active proposals to force vendors to leave encryption back doors in their VoIP gear, but that could change. "Nothing in regulations is permanent," he says.

Endler says that attempts by researchers to learn more about how Skype works have been effectively blocked by measures put in place by Skype. "They've taken extreme measures to prevent reverse engineering of their client software," he says, more so than mainstream VoIP vendors.

Join the PC World newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tim Greene

Network World
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Kathy Cassidy

STYLISTIC Q702

First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni

STYLISTIC Q572

For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?