Streams are encrypted. They are exploiting VBR(variable bit rate) part of the Skype's architecture. Skype uses VBR to make sure they pack enough fidelity while

Streams are encrypted. They are exploiting VBR(variable bit rate) part of the Skype's architecture. Skype uses VBR to make sure they pack enough fidelity while maintaining the low bandwidth requirements. It is an interesting paper to read. Initially I thought they exploited LPC which is the base for all our mobile communications as well. As long as VOIP provider doesn't opt for VBR compression, their networks are immune from this attack. From the paper. Under VBR, the size of the codebook entry, and thus the size of the encoded frame, can vary based on the complexity of the input frame. The specification for Secure RTP (SRTP) [3] does not alter the size of the original payload; thus encoded frame sizes are preserved across the cryptographic layer. The size of the encrypted packet therefore reflects properties of the input signal; it is exactly this correlation that our approach leverages to model phonemes as sequences of lengths of encrypted packets. Also, they included the solution. For this reason, the use of constant bit-rate codecs is important to consider as an alternative to simple block ciphers for VoIP, since such codecs might improve call quality given a relatively large fixed packet size. Another alternative might even be to drop or pad packets [19, 27, 57], though, in that case, the effect on perceived call quality is unclear. We note, however, that VoIP providers have made no move to employ any such measures: Skype’s SILK, for instance, is a VBR codec. Similarly, one of the leading proposals for 4G, the LTE Advanced standard, specifies a VBR codec for audio [1] and the use of SRTP to secure voice data channels.