So there is this TLS Session resumption method using Session Tickets which transfers the TLS server secret state to the client (encrypted and authenticated with a key only known to the server)
If a client wants to resume a session, he simply includes the Session Ticket in the request, which allows the server to resume the session.
- What happens if the Session key (server) is stolen?
- What could an attacker do if he records ALL packets between the server and various clients? Will he be able to decrypt everything?
The Session Ticket includes the
master_secret (which is used for symmetric crypto like AES?) (RFC 5077, page 11).
- How exactly is this
master_secretreused after Session resumption? Will server and client continue to reuse this
master_secretfor all symmetric crypto (e.g. AES)?