When voice encryption is being enabled we use AES-256-EAX to encrypt the voice traffic. For key exchange we use ECDH with ed25519 as curve. Both sides generate a new keypair on every connect and exchange them. There is also a identity validation that is based on ECDSA with prime256v1 as curve.