How can one decrypt a SSL/TLS session? Besides the private key what else is needed?

http://security.stackexchange.com/questions/24715/how-can-one-decrypt-a-ssl-tls-session-besides-the-private-key-what-else-is-need

Suppose I have a non-DHE-based TLS session stored in a Wireshark or Netmon trace. What is required to decrypt this data? Is the private key of the certificate all that would be needed? What tools enable this decryption? Going a step further, what is needed to decrypt a DHE based TLS session? ssl share|improve this question edited Nov 29 '12 at 17:51 asked Nov 29 '12 at 17:37 makerofthings7 12.8k331138

"Is the private key of the certificate all that would be needed?" Yes. "what is needed to decrypt a DHE based TLS session" the private DH key of either side, or the shared secret resulting from the DH exchange. – CodesInChaos Nov 29 '12 at 17:41 @CodesInChaos I'm trying to do this now with a non DHE session but I can't figure out whats needed – makerofthings7 Nov 29 '12 at 17:43

3 Answers

activeoldestvotes

up vote6down voteaccepted

For RSA or DH (not DHE) cipher suites, you just need the server private key, of type RSA or DH, respectively (DH certificates are exceedingly rare). For DHE cipher suites, you would need the dynamically generated Diffie-Hellman private key. This key is never stored anywhere, and that is by design. Correspondingly, you cannot decrypt the data afterwards. This is called Perfect Forward Secrecy. For the TLS cipher suite with a pre-shared secret: raw PSK cipher suites can be decrypted with knowledge of the shared secret; RSA_PSK suites need knowledge of both the shared secret and the RSA private key; DHE_PSK suites provide perfect forward secrecy. SRP cipher suites also provide perfect forward secrecy. There again, this is by design: if knowledge of the password sufficed to decrypt a recorded connection, then this would allow offline dictionary attacks, precisely what SRP is meant to thwart. share|improve this answer answered Nov 29 '12 at 18:22 Thomas Pornin 84.3k17161295

up vote1down vote	To decrypt SSL data in Wireshark Click Edit : Preferences Expand Protocols : Select SSL Edit the "RSA Keys List" with the path names and password as appropriate share|improve this answer answered Nov 29 '12 at 18:06 makerofthings7 12.8k331138

up vote0down vote

One way to view the contents of a HTTPS session is to use Fiddler as a local proxy. Just be sure to launch the tool, and open options and enable SSL monitoring (this will add one root cert and many additional certificates to your trusted store) Although this doesn't directly answer the question on how to decrypt a captured TLS session, it may be of use to some people.