How to see the encrypted key in wireshark, during ssl key exchange?

后端 未结 3 1085
梦毁少年i
梦毁少年i 2020-12-01 15:52

In wireshark, I am able to see the encrypted data to and fro from my PC. It does not use diffie hellman algorihm for key exchange because I see only the Client Key Exc

3条回答
  •  执念已碎
    2020-12-01 15:56

    Until recently the dissection of the ClientKeyExchange was like this(version 1.6 and below):

    TLSv1 Record Layer: Handshake Protocol: Client Key Exchange
        Content Type: Handshake (22)
        Version: TLS 1.0 (0x0301)
        Length: 134
        Handshake Protocol: Client Key Exchange
            Handshake Type: Client Key Exchange (16)
            Length: 130
    

    But if you use this verison(1.7.2 upwards) the key dissection will be like this:

    TLSv1 Record Layer: Handshake Protocol: Client Key Exchange
        Content Type: Handshake (22)
        Version: TLS 1.0 (0x0301)
        Length: 134
        Handshake Protocol: Client Key Exchange
            Handshake Type: Client Key Exchange (16)
            Length: 130
            RSA Encrypted PreMaster Secret
                Encrypted PreMaster length: 128
                Encrypted PreMaster: 761b1beac35e59de9a3bb9f74ebf9109b738e8ad346
    


    You can see the encrypted pre-master:)

提交回复
热议问题