peter/wireshark-notes - Notes and captures for patching TLS in Wireshark

Age	Commit message (Collapse)	Author	Files	Lines
2013-12-13	generate-wireshark-cs: Rename SSL_CIPHER_MODE_xxx to MODE_xxx	Peter Wu	1	-1/+1
	Since wireshark rev54039
2013-12-10	More ciphers support	Peter Wu	1	-2/+6
	* generate-wireshark-cs: fix key sizes for export ciphers * notes, openssl-{connect,listen}: support more cipher suites, including NULL.
2013-12-09	generate-wireshark-cs: add missing EXPORT1024 case	Peter Wu	1	-0/+1
	Fixes: Unknown kex in 0x0060 TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 (tmp=RSA_EXPORT1024) Unknown kex in 0x0061 TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 (tmp=RSA_EXPORT1024) Unknown kex in 0x0062 TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA (tmp=RSA_EXPORT1024) Unknown kex in 0x0064 TLS_RSA_EXPORT1024_WITH_RC4_56_SHA (tmp=RSA_EXPORT1024) But to be honest, is there any implementation that actually use these cipher suites...?
2013-12-09	generate-wireshark-cs: add RC4 and RC2 with 56 bits	Hauke Mehrtens	1	-2/+3
	This is used in some export ciphers
2013-12-09	generate-wireshark-cs: some fixes for CCM	Hauke Mehrtens	1	-23/+35
	This applies some fixes for CCM to the cipher suite generation script. There are some special cases for CCM ciphers: the iv blocksize is always 4, it does not have a digest and the mode should be CCM or CCM_8. [ Peter: basically restructure (indent+case) and fix CCM block size. I removed the digest as that was already covered and diglen=0; is not meaningful ]
2013-12-06	generate-wireshark-cs: use "0" for unavailable block size	Peter Wu	1	-1/+7
	Stream cipher RC4 (and block cipher NULL) do not have a IV. The packet-ssl-utils code needs to be fixed up for this, but this generator can already be created. Revert this patch until the block to iv_size rename is complete.
2013-12-06	generate-wireshark-cs: visual alignment	Peter Wu	1	-3/+18
	Previously, everything was concatenated, making it more difficult to spot errors.
2013-12-06	generate-wireshark-cs: CCM support	Peter Wu	1	-2/+9

2013-12-03	generate-wireshark-cs: add CCM and CCM_8 modes	Peter Wu	1	-0/+2

2013-12-03	generate-wireshark-cs: use hexadecimal IDs	Peter Wu	1	-1/+1

2013-10-01	generate-wireshark-cs: fix ECDH, add PSK, drop SIG_	Peter Wu	1	-19/+5
	ssl_get_keyex_alg.txt contains the current supported list of cipher suites for key exchange by the ssl_get_keyex_alg() function. It was generated with: awk -F '[ :;\t]+' '/^gint ssl_get_keyex_alg/{p=1} /case/{if(p)a[$3]=0} /return/{for(i in a)print i, $3;delete a} /^} /{if(p)exit}' packet-ssl-utils.c This file can then be converted and sorted with: while read num name; do echo $((num)) $name; done < ssl_get_keyex_alg.txt \| sort -n > /tmp/1 To get the current cipher suites list: awk -F '[ {,]+' '/,KEX_/{print $2, $3}' packet-ssl-utils.c > /tmp/2 Check which cipher suites are missing or have an incorrect key exchange: diff -y /tmp/[12] It turned out that the ECDH cipher suites were incorrectly marked as DH (tested on top of SVN rev 52320). Therefore adjust the generate-wireshark-cs file.
2013-09-19	Distinguish GCM ciphers, fix RC2 type	Peter Wu	1	-3/+5
	RC2 is a block, not a stream. I thought I fixed this some time ago...
2013-09-16	Drop digest length and export flag.	Peter Wu	1	-1/+1
	This is removed because it is redundant, see https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9144#c16
2013-09-15	generate-wireshark-cs: support export, IDEA, DES, RC2	Peter Wu	1	-18/+60
	And also support reading suites.txt (generated from IANA's CSV[1]). Not supported are SRP, KRB5, PSK, ARIA and CCM. Suggested usage: grep -vE '_(SRP\|KRB5\|PSK\|ARIA)_\|_CCM(_\|$)' suites.txt \| ./generate-wireshark-cs [1]: http://www.iana.org/assignments/tls-parameters/tls-parameters-4.csv
2013-09-14	Initial commit of notes, dumps and scripts	Peter Wu	1	-0/+160