Hey all!
For a university project, my colleagues and me decrypted a TLS 1.2 Session with the help of the following guide: https://www.comparitech.com/net-admin... Unfortunately, it did not work out on Websites (like facebook) that used TLS 1.3 for encryption. Does anyone know, how to accomplish that?
Thanks a lot!
Decryption of TLS 1.3 was demonstrated at SharkFest'19 US by @Lekensteyn and his presentation should be up on the SharkFest retrospective page after the conference, and is also available from previous SharkFest presentations.
You will need to user the pre-master secret method as TLS 1.3 doesn't support the RSA key exchange methods that were used in previous versions of TLS.
Do you have the pre-master log file? Have you configured the TLS dissector preferences to use that log file?
The slides are now up here: https://lekensteyn.nl/files/wireshark... You need at least Wireshark 2.6 for TLS 1.3 decryption support.
Thank you very much for your immediate help. Unfortunately, we could not apply the additional settings that were needed, since the due date was too close and we had infrastructural issues at the university. We will include your comment and link your slides in our seminar paper though to provide help for further projects.
Asked: 2019-06-12 08:16:53 +0000
Seen: 15,912 times
Last updated: Jun 12 '19
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
What version of Wireshark are you using? If you're not using the latest version, I'd highly recommend that you upgrade.