Re: [Linphone-developers] ZRTP error 0x70 during negotiation between Linphone on Linux and Linphone on Mac OS X.

[Werner Dittmann]

Does it happen for every call when Linphone Mac OS X is involved?

Yes, the error code 0x70 if a failure on the confirm HMAC check. This
may happen if the data was modified while traveling on the network
(not very plausible :-) ) or some of the crypto functions don't work
correctly on the Mac.

The Confirm packet exchange in ZRTP confirms that the computed DH and
derived keys are correct. Thus my first rough guess is that the DH
functions have some problems. I don't know the Linphone integration/build
scripts. Can you check which crypto library Linphone on Linux and Mac OS X
uses?

ZRTP supports openSSL to perform big integer, HMAC, AES functions and it
also supports/contains stand-alone crypto/big integer functions that do
not require openSSL.

Werner

Am 08.04.2013 23:27, schrieb M. Vefa Bicakci:
> Hello,
> 
> A friend of mine is using the official distribution of Linphone 3.5.2 with 
> ZRTP enabled on Mac OS X 10.7.5, and I am using Linphone 3.5.2 with ZRTP 
> enabled on Debian Sid. (I compiled Linphone from sources, and confirmed that 
> ZRTP works.)
> 
> The problem is, when I call my friend, or when my friend calls me, ZRTP 
> negotiation fails with "error 0x70", which I believe is an HMAC verification 
> error, based on the libzrtpcpp2 source code. The call, however, goes through 
> properly, and we are able to talk without ZRTP. I have verified this issue 
> with sip2sip.info and sip.linphone.org accounts.
> 
> Below, under my signature, I am quoting the relevant part of the logs from 
> the Linux side of a ZRTP negotiation attempt.
> 
> Because Linphone/Linux to Linphone/Linux calls work for me with ZRTP, I think 
> the ZRTP negotiation failure has to do running Linphone and/or libzrtpcpp2 on 
> Mac OS X.
> 
> Is there any information I can provide to help in fixing this problem? I 
> wrote a few MacPorts port files to compile Linphone with ZRTP support under 
> Mac OS X, so I can test patches for Linphone (or libzrtpcpp2) if needed.
> 
> Thank you in advance,
> 
> M. Vefa Bicakci
> 
> =-=-=-=
> Log excerpt from Linux-side of a ZRTP negotiation.
> 
> message: Priority used: 99
> message: Audio MSTicker setpriority() failed: Permission denied, nevermind.
> message: Setting maxbitrate=28000 to speex encoder.
> message: Using bitrate 25600 for speex encoder, ip bitrate is 41600
> message: Filter MSRtpRecv is already being scheduled; nothing to do.
> message: Initialized ZRTP context
> message: Starting ZRTP engine
> message: sent ZRTP Hello    64639
> message: Call 0xa1e2c08: moving from state LinphoneCallConnected to 
> LinphoneCallStreamsRunning
> message: alsa_open_r: opening default at 32000Hz, bits=16, stereo=0
> message: call answered.
> warning: alsa_set_params: periodsize:1024 Using 1024
> warning: alsa_set_params: period:8 Using 8
> message: alsa_open_r: Audio params set
> message: ms_ticker_set_time_func: ticker updated.
> warning: Getting reference signal but no echo to synchronize on.
> warning: Not enough ref samples, using zeroes
> message: alsa_open_w: opening default at 32000Hz, bits=16, stereo=0
> warning: alsa_set_params: periodsize:1024 Using 1024
> warning: alsa_set_params: period:8 Using 8
> message: alsa_open_w: Audio params set
> message: sent ZRTP Hello    64640
> message: sent ZRTP Hello    64641
> message: sent ZRTP Hello    64642
> message: Received message: 
> ACK sip:address@hidden SIP/2.0
> Via: SIP/2.0/UDP x.x.x.x:5060;branch=z9hG4bK1e32.5a9e0606.2
> Via: SIP/2.0/UDP 
> x.x.x.x:5060;received=x.x.x.x;rport=5060;branch=z9hG4bK1951429261
> From: <sip:address@hidden>;tag=1491596529
> To: <sip:address@hidden>;tag=303649295
> Call-ID: 251526520
> CSeq: 21 ACK
> Contact: <sip:address@hidden>
> Proxy-Authorization: Digest username="y", realm="sip2sip.info", 
> nonce="51631aa05fc01a14dd54a23d99148c0bccc35c11", uri="sip:address@hidden", 
> response="f86fe435bcbedce9acbe15cd497c95de", algorithm=MD5
> Max-Forwards: 69
> User-Agent: Linphone/3.5.2 (eXosip2/3.3.0)
> Content-Length: 0
> 
> 
> message: Message received from: x.x.x.x:5060
> message: Message received from: x.x.x.x:5060
> message: MESSAGE REC. CALLID:251526520
> message: Message received from: x.x.x.x:5060
> message: This is a request
> message: eXosip: timer sec:0 usec:492731!
> message: linphone process event get a message 15
> 
> message: CALL_ACK
> message: bandwidth usage: audio=[d=0.0,u=37.1] video=[d=0.0,u=0.0] kbit/sec
> message: Thread processing load: audio=25.805088      video=0.000000
> message: received ZRTP Hello    42516
> message: sent ZRTP HelloACK 64643
> message: ZRTP INFO zrtp_InfoHelloReceived
> message: ZRTP INFO zrtp_InfoCommitDHGenerated
> message: received ZRTP HelloACK 42517
> message: sent ZRTP Commit   64644
> message: received ZRTP HelloACK 42518
> message: received ZRTP Hello    42519
> message: sent ZRTP Commit   64645
> message: received ZRTP Hello    42520
> message: received ZRTP HelloACK 42521
> message: received ZRTP HelloACK 42522
> message: received ZRTP Hello    42523
> message: cb_nict_kill_transaction (id=23)
> message: free transaction resource 23 2046201147
> message: free nist resource
> message: eXosip: timer sec:0 usec:434449!
> message: sent ZRTP Commit   64646
> message: received ZRTP Commit   42524
> message: received ZRTP DHPart1  42525
> message: ZRTP INFO zrtp_InfoInitDH1Received
> message: ZRTP INFO zrtp_InfoRSMatchFound
> message: sent ZRTP DHPart2  64647
> message: Samples are back.
> warning: Not enough ref samples, using zeroes
> message: received ZRTP DHPart1  42526
> message: Samples are back.
> message: sent ZRTP DHPart2  64648
> message: cb_nict_kill_transaction (id=29)
> message: eXosip: timer sec:0 usec:19859!
> message: cb_nict_kill_transaction (id=30)
> message: eXosip: timer sec:0 usec:70898!
> message: cb_nict_kill_transaction (id=31)
> message: cb_nict_kill_transaction (id=32)
> message: eXosip: timer sec:1 usec:733428!
> message: received ZRTP DHPart1  42527
> message: bandwidth usage: audio=[d=32.6,u=33.2] video=[d=0.0,u=0.0] kbit/sec
> message: Thread processing load: audio=19.569719      video=0.000000
> message: sent ZRTP DHPart2  64649
> message: received ZRTP Confirm1 42528
> message: ZRTP INFO zrtp_InfoInitConf1Received
> error: ZRTP ERROR unkwown
> error: sent ZRTP Error    0x70 64650
> message: received ZRTP Confirm1 42529
> error: sent ZRTP Error    0x70 64651
> message: received ZRTP Confirm1 42530
> message: received ZRTP ErrorACK 42531
> message: received ZRTP ErrorACK 42532
> message: bandwidth usage: audio=[d=28.8,u=35.7] video=[d=0.0,u=0.0] kbit/sec
> message: Thread processing load: audio=27.151737      video=0.000000
> message: alsa: sound/wall clock skew is average=-14.600714 ms, instant=-15 ms
> 
> 
> _______________________________________________
> Linphone-developers mailing list
> address@hidden
> https://lists.nongnu.org/mailman/listinfo/linphone-developers
> 


-- 
----------------------------------------------
Werner Dittmann    address@hidden
Tel +49 173 44 37 659
PGP key: 82EF5E8B