HackTalk

Reverse engineer extracts Skype crypto secret recipe

Skype Crypto cracked? what could this possbile be?

Cryptoanalysts have published what they claim is the secret recipe behind a Skype encryption algorithm.

Source: http://www.theregister.co.uk/2010/07/09/skype_crypto/

A group of code breakers led by Sean O’Neil reckon they have successfully reverse engineered Skype’s implementation of the RC4 cipher, one of several encryption technologies used by the consumer-oriented VoIP service. The proprietary encryption technology is used by the VoIP service to protect communications exchanged between its its clients and severs. It also restricts what clients can access the service, a restriction Skype had plans to ease with the upcoming publication of an API.

O’Neil’s original blog posting has been pulled but copies can still be found in Google’s cache (here). O’Neil has published the obfuscated Skype RC4 key expansion algorithm, only one of a battery of encryption technologies used by Skype. “There are seven types of communication encryption in Skype: its servers use AES-256, the supernodes and clients use three types of RC4 encryption – the old TCP RC4, the old UDP RC4 and the new DH-384 based TCP RC4, while the clients also use AES-256 on top of RC4. It all is quite complicated, but we’ve mastered it all,” O’Neil explains. ®

Questions and thoughts about this?

WizZ ~ HackTalk Security Team

Article By

has written 728 articles!

Subscribe to the HackTalk Security feed via RSS or EMAIL to receive instant updates.