How would that work? ZRTP defines crypto for RTP. GSM does not use RTP.

It would probably make more sense to define something similar to ZRTP that does all signalling in-band through the audio channel.