1
$\begingroup$

I'm debugging an application which communicates between client and server using a SSL/TLS connection, and want to capture and analyze the sent data.

Are the client write keys and server write keys enough to decrypt the data, or do we also need the MAC keys?

$\endgroup$
  • $\begingroup$ Are you looking from the perspective of an attacker, or of one of the participants? $\endgroup$ – Paŭlo Ebermann May 27 '13 at 17:49
  • $\begingroup$ I'm having access to both server and client.For debugging I need to capture and analyze the data..so its the perspective of one of the participants $\endgroup$ – Kalai May 28 '13 at 5:17
3
$\begingroup$

To simply decrypt the data, the keys that were used to encrypt it are all you need.

However without the MAC keys you won't be able to verify the integrity of a message, so you won't be able to tell if the data you have decrypted is the same as what was sent (or even who sent it).

If you're debugging on a trusted local network then that might not be too important.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.