ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Decrypt SSH

From: Michael Holt <m.iostreams@xxxxxxxxx>
Date: Sun, 22 Aug 2010 07:11:06 -0700
 It looks like Diffie-Hellman was added in 2006:
http://tools.ietf.org/html/rfc4419

I got that from here:
http://en.wikipedia.org/wiki/Secure_Shell

On 8/22/2010 3:30 AM, Ricardo Mendes wrote:
Hi, thanks.

That applies for booth SSH versions, 1 and 2?

Regards

On Sat, Aug 21, 2010 at 2:32 PM, M Holt<m.iostreams@xxxxxxxxx>  wrote:
SSH uses diffie-hellman to create a separate key that is used for the session.
It is different than just SSL, and just having an RSA key will not help you decrypt.

Do some google searches and you will find a number of hits on the topic.

http://en.wikipedia.org/wiki/Diffie�Hellman_key_exchange

  -- Mike

On Aug 20, 2010, at 5:02 PM, Ricardo Mendes<ricardo.amm@xxxxxxxxx>  wrote:

Hi,

Can I use Wireshark to decrypt SSH traffic, with Wireshark SSL decrypt
feature, trough RSA keys?

Thanks in advance,
Ricardo Mendes
___________________________________________________________________________
Sent via:    Wireshark-users mailing list<wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list<wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list<wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe