The use of AEA and AES is discouraged as these are older Avaya-proprietary-encryption techniques.

Avaya security recommends to use the following types of encryption techniques:

In all these encryption algorithms, the system dynamically creates encryption keys for each connection. The system creates the encryption keys within the gatekeeper and transmits the keys to the endpoints and the processing boards over secure links. Additionally, the system produces separate keys for the incoming and outgoing streams of each call. For conference calls, the system assigns a unique pair of keys for encrypting the payload of each endpoint, one for the incoming stream and one for the outgoing stream.

Because all the authentication keys are dynamically created and assigned, the system stores these keys only in RAM. Administrators or users cannot access these keys. RTP keys are not escrowed.

SRTCP provides the ability to encrypt the control channel associated with the SRTP media stream. These two channels normally reside on adjacent UDP ports.