SIP + ZRTP. Jitsi and SFLPhone are decent clients, the people at ostel.co are working on some infrastructure to ease the usage of encrypted, decentralized VOIP but most public SIP providers should work your use case.