Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: [Wireshark-dev] help needed regarding decrypting the ssl

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: prashanth joshi <prashanthsjoshi2000@xxxxxxxxx>
Date: Fri, 1 Aug 2008 02:28:20 -0700 (PDT)

Hi all,
I need to work on decrypting the ssl.
I am not aupposed to use the Man in the middle attack. I need to implement the ssl decrypter on a machine that acts as a sniffer.
I can have the information from the server as the requirement is for a server internal to the company
The server certificate contains the public key and private key, both we can know if the certificates are self signed. However this information itself may not be sufficient to decrypt the ssl. Because the Diffie-Hellman key exchange algorithm generates the prime numbers for the client and the server which are not sent out and are kept secret.
The definition of the TLS says that the client sends it randon number during client hello and the server sends its random number during the server hello. However in Diffie-Hellman algorithm the client keeps its random number secret and the server keeps its random number secret. Is there any way to decrypt the ssl?
is it possible?

Regards,
Prashanth

Diffie-Hellman key exchange


  • Follow-Ups:
    • Re: [Wireshark-dev] help needed regarding decrypting the ssl
      • From: Paolo Abeni
  • Prev by Date: [Wireshark-dev] Fw: help needed regarding decrypting the ssl
  • Next by Date: [Wireshark-dev] buildbot failure in Wireshark (development) on OSX-10.5-x86
  • Previous by thread: [Wireshark-dev] Fw: help needed regarding decrypting the ssl
  • Next by thread: Re: [Wireshark-dev] help needed regarding decrypting the ssl
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation