使用 openssl 命令列工具解密 SSL 流量 7

Question

產生主密鑰/密鑰我按照 shell 腳本中概述的步驟進行操作。我透過多次手動輸入這些步驟（手動輸入 $key）來驗證我是否正確地將數據傳遞給它，在這種情況下最終我得到了相同的結果/數據

key = 上一步驟解密的預主金鑰

03033ab0d673caefc4a9f6d35cf51d349815d67a09ac454f11dfb9741c96001a
66a3e82f688b82138403018384cf35f2

mseed.key = "master Secret" + client.random + server.random 當我使用 hexdump xxd -p mseed.key 時，該文件是一個二進位文件，因此您可以看到資料：

6d617374657220736563726574 5b689404b500456eef2f1a79ec782eb3ee
aac3a8d7c02ae03c8426f363b18a33 5b6894043bb1289e158b0278ef66dc
53c9fa71e75e900739af2657cd4476ec1e

Note: the spaces are not in the data I added those manually to make it clear

client.random xxd -p crnd.bin

5b689404b500456eef2f1a79ec782eb3eeaac3a8d7c02ae03c8426f363b1
8a33

伺服器.隨機 xxd - srnd.bin

5b6894043bb1289e158b0278ef66dc53c9fa71e75e900739af2657cd4476
ec1e

只是為了讓我清楚這些隨機數字還包括 unix 時間前綴（正確嗎？）

key=${1} #passed to shell script 
openssl dgst -sha256 -mac hmac -macopt hexkey:$key <mseed.key -binary >a1
openssl dgst -sha256 -mac hmac -macopt hexkey:$key <a1 -binary >a2
openssl dgst -sha256 -mac hmac -macopt hexkey:$key <a2 -binary >a3
openssl dgst -sha256 -mac hmac -macopt hexkey:$key <a3 -binary >a4

下一步是：

cat a1 mseed.key | openssl dgst -sha256 -mac hmac -macopt hexkey:$key -binary >k1
cat a2 mseed.key | openssl dgst -sha256 -mac hmac -macopt hexkey:$key -binary >k2
cat a3 mseed.key | openssl dgst -sha256 -mac hmac -macopt hexkey:$key -binary >k3   
cat a4 mseed.key | openssl dgst -sha256 -mac hmac -macopt hexkey:$key -binary >k4

接下來擷取主秘密

cat k1 k2 | head -c48 | xxd -p -c48 > master_secret.hex
truncate -s-1 master_secret.hex

此時 master_secret

$cat master_secret.hex
ee45b637f95ddf3b3bf51661cdf4e07bdd63a67f2d2df776322992b3fd871fe4ba38debcd7179bf4
ef8b8bb814fe4544d

從我的wireshark日誌中，我在對話期間隨機提取了客戶端並將其保存為二進位檔案crnd.bin

Random: 5b689404b500456eef2f1a79ec782eb3eeaac3a8d7c02ae0...
    GMT Unix Time: Aug  6, 2018 14:31:32.000000000 Eastern Daylight Time
    Random Bytes: b500456eef2f1a79ec782eb3eeaac3a8d7c02ae03c8426f3...

隨後，我捕獲伺服器時間和隨機位元組並將其保存為 srnd.bin

Random: 5b6894043bb1289e158b0278ef66dc53c9fa71e75e900739...
    GMT Unix Time: Aug  6, 2018 14:31:32.000000000 Eastern Daylight Time
    Random Bytes: 3bb1289e158b0278ef66dc53c9fa71e75e900739af2657cd...

戴夫，此時我很困惑我可能會錯過什麼。我不認為我遺漏了諸如變數中的空值之類的東西，也沒有遺漏任何我仔細檢查過數據和步驟的東西，並且看不出我可能遺漏了什麼。透過這些步驟，你發現什麼了嗎？謝謝