Does Phenix encrypt its real-time streams?

Each stream is delivered using transport level encryption. This encryption is unique per user so that if a single stream is compromised the key used to decrypt the stream cannot be used to decrypt other streams, even for the same content.

We transfer our data using Secure Real-Time Transport Protocol (SRTP). SRTP defines a profile of Real-Time Transport Protocol (RTP), intended to provide encryption, message authentication and integrity, and replay protection to the RTP data.

For encryption and decryption of the data flow (and hence for providing confidentiality of the data flow), we use a default cipher that is commonly used for SRTP.

To authenticate the message, protect its integrity, and to provide replay protection, we use a standard security algorithm.

To securely establish the keys for all of the above, we use Datagram Transport Layer Security (DTLS).

For more information about our key management workflows, please see our documentation at phenixrts.com/docs.