Questions tagged [handshake]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
19
votes
3answers
5k views

Can attackers change the public key of certificate during the SSL handshake

The communication is not encrypted during the SSL handshake. If an attacker conducts a man in the middle attack between server and client to capture the certificate, and change the public key in the ...
3
votes
1answer
624 views

What are the factors making a WPA2 handshake suitable for cracking?

Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
1
vote
2answers
991 views

Do TLS standards require the server-side preference to always be used when negotiating ciphers to use?

Someone told me the other day that the TLS standards require the server-side to always have the authority to decide which mutual cipher to use when negotiating with a remote client. This makes sense,...
3
votes
1answer
128 views

TLS 1.2 Handshake: Does the server have to take all extensions sent by the Client?

I am unsure about how extensions are handled in TLS v1.2. During the handshake, the client is able to add some extensions during ClientHello. As far I understood, the server can pick arbitrary ...
2
votes
1answer
132 views

Is it possible to setup 1-way TLS client authentication without server certificates?

Is it possible with TLS to only authenticate the client? In other words can one-way TLS be setup in such a way that only the host initiating the connection uses a client certificate and the second ...
2
votes
1answer
333 views

In TLS 1.3 handshake, can an internal error at the client be interpreted as a decrypt error at the server?

In TLS 1.3 handshake protocol, the client sends the ClientHello message to the server. The server then sends back the ServerHello message followed by some encrypted messages. The client then computes ...
1
vote
2answers
2k views

Where is Hashing Used in the TLS Handshake

I understand the basic steps in the TLS handshake. My question is, where and how does one-way hashing fit into the steps below? Is it the session key that is hashed? Many texts mention that the ...
1
vote
0answers
502 views

SSL/TLS handshake potential vulnerabilities [duplicate]

After handshake one could be assure that data are encrypted and secure. But before that, handshake parameters are transferred via not secured channel. One could be MitM during the handshake procedure....
0
votes
0answers
74 views

symmetric key generation in TLS 1.3

Am trying to understand the phase where the symmetric key is getting generating. From what I am understanding Diffie-Hellman is used to derive the symmetric key in TLS1.3 I am reading this tls ...
0
votes
1answer
282 views

How does Authenticator gets the PMK which is used to calculate PTK?

I am trying to setup a Supplicant- authenticator and AAA server to perform EAPOL mechanism. I am able to successfully completed the EAP authentication procedure but 4-way handshake was not initiated ...