Is it possible to decrypt Connect Direct Secure Plus with Wireshark? asked 23 Apr '13, 15:51 Steve Fenter |
One Answer:
Although Connect Direct Secure Plus uses TLS, there is no decryption support for that protocol in Wireshark. Apparently they use a variation of Diffie Hellman to establish a crypto key, which makes it impossible harder to decrypt the data stream, as there is no way to generate the required session key, unless either party (client or server) discloses that key. From: http://www.commoncriteriaportal.org/files/epfiles/sterling-v37-sec-e.pdf
Regards answered 24 Apr '13, 04:09 Kurt Knochner ♦ |