Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm debugging an application which communicates between client and server using a SSL/TLS connection, and want to capture and analyze the sent data.

Are the client write keys and server write keys enough to decrypt the data, or do we also need the MAC keys?

share|improve this question
Are you looking from the perspective of an attacker, or of one of the participants? – Paŭlo Ebermann May 27 '13 at 17:49
I'm having access to both server and client.For debugging I need to capture and analyze the its the perspective of one of the participants – Kalai May 28 '13 at 5:17

To simply decrypt the data, the keys that were used to encrypt it are all you need.

However without the MAC keys you won't be able to verify the integrity of a message, so you won't be able to tell if the data you have decrypted is the same as what was sent (or even who sent it).

If you're debugging on a trusted local network then that might not be too important.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.