Wireshark-dev: Re: [Wireshark-dev] [pcap-ng-format] Proposal for storing decryption secrets in
From: Guy Harris <[email protected]>
Date: Sat, 6 Oct 2018 11:30:53 -0700
On Oct 6, 2018, at 2:24 AM, Anders Broman <[email protected]> wrote:

>> The newline requirement is specified in the current proposal
>> https://github.com/pcapng/pcapng/pull/54/files#diff-83e833afc268a7be6b36d2b897656e28R1912
>> There is no explicit text on concatenation though.
> This presumes the secret block is a text block rather than a binary blob?

It presumes that the TLS session secrets blob is text rather than binary; it doesn't require that *all* secrets be text - the description of the Secrets field is just "binary octets containing secrets".