Wireshark-dev: [Wireshark-dev] Problem decrypting TLS with sslkeylog in Wireshark

Date Prev · Date Next · Thread Prev · Thread Next
From: שי מרדכי <shaimordehai@xxxxxxxxx>
Date: Thu, 19 Dec 2024 14:57:39 +0200

Dear Wireshark Developers,

I am a computer science student and I am writing to you today because I am experiencing a problem decrypting TLS traffic in Wireshark.

I have created a PCAP file using a Python script that utilizes the Scapy and Cryptography libraries. The script encrypts the packets between a server and a client using [ציין סוג הצפנה]. I have also generated an sslkeylog file that includes the client random and master secret.

I am using Wireshark version [ציין גרסה] and have followed the instructions in the Wireshark documentation to decrypt the TLS traffic using the sslkeylog file. However, the decryption is not working. I have been trying to resolve this issue for the past four months without success.

I have attached the PCAP file and the sslkeylog file to this email.

Could you please provide any guidance or suggestions on how to troubleshoot this problem?

Thank you for your time and consideration.

Sincerely,

Shay Mordechai

the code:

https://github.com/shay0129/ctf-challenge-solution

image.png