Security (6th Plugtests)
TASSTA MCX clients use AES-128 standard to encrypt data payload, MCS signaling and media payload. The same encryption method is used for the signing data payload.
This is based on Security of the Mission Critical (MC) service (TS 33.180) specification.
KMS server provides encryption policy to all system entities. As such, it is responsible for choosing crypto parameters, including the encryption algorithm.
TASSTA participated in the following security tests:
- Key material download from KMS to MCPTT server (CSC-9) with proxy (client and server)
- Key material download from KMS to MCPTT server (CSC-9) without proxy (client and server)
- XML contents encryption in MCPTT private calls (mcptt-info and resource-lists) (client and server)
- XML contents encryption in MCPTT group calls (mcptt-info) (client and server)
- XML contents encryption in affiliation procedure (client and server)
- XML contents encryption in location procedure (client and server)
- XML contents encryption in registration and authorization procedures (client and server)