[Bro] Subclassing from SSL Analyzer

Seth Hall seth at icir.org
Thu Jun 18 07:12:10 PDT 2015

> On Jun 18, 2015, at 9:38 AM, Alec Waters <Alec.Waters at dataline.co.uk> wrote:
> Even if you've got the key, isn't the analyser going to be stymied in the
> presence of Diffie-Hellman in the cipher suite?

Yep, SSL/TLS decryption is far from a panacea.  It is a neat example in the analyzer though and I think we can do it more cleanly than I’ve seen most other projects do it (and make it easier to use!).


Seth Hall
International Computer Science Institute
(Bro) because everyone has a network

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20150618/08a0ba3c/attachment.bin 

More information about the Bro mailing list