1
$\begingroup$

I'm debugging an application which communicates between client and server using a SSL/TLS connection, and want to capture and analyze the sent data.

Are the client write keys and server write keys enough to decrypt the data, or do we also need the MAC keys?

Improve this question
$\endgroup$
2
  • $\begingroup$ Are you looking from the perspective of an attacker, or of one of the participants? $\endgroup$
    – Paŭlo Ebermann
    Commented May 27, 2013 at 17:49
  • $\begingroup$ I'm having access to both server and client.For debugging I need to capture and analyze the data..so its the perspective of one of the participants $\endgroup$
    – Kalai
    Commented May 28, 2013 at 5:17

1 Answer 1

Reset to default
3
$\begingroup$

To simply decrypt the data, the keys that were used to encrypt it are all you need.

However without the MAC keys you won't be able to verify the integrity of a message, so you won't be able to tell if the data you have decrypted is the same as what was sent (or even who sent it).

If you're debugging on a trusted local network then that might not be too important.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.