4 ms·
Just private key is not enough bc of PFS - you need to intercept key exchange to grab a temporary session key
by dilyevsky 4y ago
Just private key is not enough bc of PFS - you need to intercept key exchange to grab a temporary session key
- benmmurphy 4y agoOne option is to use ebpf uprobes to dump the key material or plaintext (https://github.com/ehids/ecapture https://github.com/ehids/ecapture ). Should be easy for c-like TLS libraries probably less useful for JIT languages.
- jmartrican 4y agoSolid point. Didn't realize that.