Multi-party E2EE voice calls via Jitsi

[lrq3000]

Is your suggestion related to a problem? Please describe.
Since April 12, Jitsi Meet implements multi-party E2EE by setting a key. Up to now, Riot could only encrypt 1-on-1 voice calls, but not multiparty voice calls as this relied on Jitsi Meet which did not implement multi-party E2EE due to technical limitations at the time.

Describe the solution you'd like
It would be great if Riot could automatically setup this key when using Jitsi Meet for video calls. I am not a security expert, but a randomly generated key shared between parties through Matrix (which is E2EE by default now) may be enough?

[t3chguy]

NOTE e2ee is work in progress. This document describes some of the high-level concepts and outlines the design. Please refer to the source code for details.

https://github.com/jitsi/lib-jitsi-meet/blob/master/doc/e2ee.md#end-to-end-encryption-using-insertable-streams

it is not actually in release yet.

[t3chguy]

But yes otherwise this is possible and even planned.

More interestingly, Jitsi may be using some of Matrix' crypto for it:

Our next step is therefore to work out exactly how key management and exchange would work. We expect we will be using The Double Ratchet Algorithm through libolm but the details are still to be ironed out.

[lrq3000]

It is released, I just tested it myself on the web app and desktop app (but it's not yet on Android).

[lrq3000]

The post I linked to was written on April 12, it seems they have deployed the feature widely since then (although it's still considered in Beta).

[t3chguy]

Well as per the doc I linked, it is still WIP and the programmatic interface is not yet stable.

[lrq3000]

Ok I understand now. But maybe worth monitoring as it seems this progresses quite fast.

[rriemann]

Any updates on this?

I only found talk+slides from 2021:

• https://archive.fosdem.org/2021/schedule/event/e2ee/
• https://archive.fosdem.org/2021/schedule/event/e2ee/attachments/slides/4435/export/events/attachments/e2ee/slides/4435/E2EE.pdf

[ptman]

It's being done without jitsi with element call

[rriemann]

It's being done without jitsi with element call

Currently ore in the future?

The source of your reference is https://www.privacyguides.org/en/real-time-communication/ which has:

Group voice and video calls are not E2EE, and use Jitsi, but this is expected to change with Native Group VoIP Signalling. Group calls have no authentication currently, meaning that non-room participants can also join the calls. We recommend that you do not use this feature for private meetings.

[Dunexus]

It is being worked on, see :

• Spec proposal : MSC3401: Native Group VoIP Signalling matrix-org/matrix-spec-proposals#3401
• Element implementation : https://github.com/vector-im/element-call

It doesn't seem production ready yet but the element implementation is quite promising.