Questions tagged [handshake]

The tag has no usage guidance.

16 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
1answer
257 views

Authentication handshake between two independent apps

I need help on a solution for below scenario from a security perspective. Scenario: There are two independent web applications App1 and App2. User will log in to App1 by performing authentication ...
2
votes
0answers
41 views

Which messages are included in (D)TLS Finished message's verify_data field for session resumption

The https://tools.ietf.org/html/rfc5246#section-7.4.9 states which messages are included for PRF computation that is included in Finished messages It is clear for 'regular' (initial) handshake But ...
2
votes
0answers
87 views

WPA technical doubts (3)

This is the third post about the set of doubts that came up when I tried to understand WPA3. I am new to this world of cyber-security so every bit of help is welcome! Someone told me that in WPA2 ...
2
votes
0answers
230 views

Why WPA2 did not design a PTK based on asymmetric cryptography?

I was shocked to learn how the PTK is crafted from the PMK in WPA2 WiFi. PMK is made with crypt_hash(SSID + PSK). OK, seems good. Then, the client and the Access Point (AP) make the famous 4 way ...
2
votes
0answers
78 views

What forces SSL exchange to require my smartcard to finish handshake

First, I hope that this is a legitimate question because it is spawned by what I am experiencing and what is happening. The environment is as follows... I have an apache reverse proxy, that I stood ...
1
vote
0answers
55 views

How does BLE secure connection ensure man in the middle protection?

I understand BLE secure connection pairing mode is improvement over Legacy Pairing. The issue with legacy pairing was intial TK value can easily be bruteforce by an attacker. In contrast, in secure ...
1
vote
0answers
57 views

How are symmetric encryption algorithms tracked once handshake is complete in common secure communication protocols?

My understanding is that most secure web communication protocols ultimately want to agree on a symmetric encryption algorithm to use for sending and receiving data. Once an algorithm is agreed upon by ...
1
vote
2answers
161 views

Key reinstallation attack how does it work without a pre-shared key?

The author of the key reinstallation attack released scripts on Github to test AP and clients. To test the clients, you have to connect to a fake AP but you still need to know the pre-shared key. Of ...
1
vote
0answers
288 views

what is the logic in choosing a certificate chain during a “server-hello” message in a SSL/TLS handshake

In a client-server ssl handshake, my server sends a certificate chain back to the client in a server-hello message. But I want to understand as to how that particular certificate chain is getting ...
1
vote
1answer
91 views

TLS 1.2. Handshake: Where do Client and Server negotiate how the master key is built from randoms and pre?

I am currently trying to solve an exercise where I should look at a TLS 1.2 handshake trace while having access to pre and both randoms (server random and client random). In order to decrypt ...
0
votes
0answers
74 views

symmetric key generation in TLS 1.3

Am trying to understand the phase where the symmetric key is getting generating. From what I am understanding Diffie-Hellman is used to derive the symmetric key in TLS1.3 I am reading this tls ...
0
votes
0answers
62 views

Automating handshake capture to decrypt 802.11 frames

Networking newbie here. I am running some experiments on IoT devices for which I need to capture the handshakes of the devices on my network in order to decrypt the frames I obtain through monitor ...
0
votes
0answers
42 views

How does WPA MIC key protect its PSK variable during 4 way handshake process

Background: I had a hard time finding an answer to a simple question, about the very first communication between an AP and a client. In the 2nd packet delivered during the 4 way handshake process (the ...
0
votes
0answers
431 views

Not able to capture 4 way handshake using airodump-ng

I am not able capture 4 way handshake, I also tried manually disconnecting and reconnecting my device to the network in hope that airodump-ng will capture the handshake but no luck. I checked the ...
0
votes
1answer
111 views

SSL Handshake problems

I captured my network traffic to a web server and the SSL Handshake consists only of two packets. Why does that happen and why aren't there all the other packets?
0
votes
0answers
53 views

Identify SSL invalid handshake using Wireshark

I am doing a research on "Network flow anomaly detection" and use Wireshark for my work. I have a problem of identifying the packets with invalid SSL/TLS handshakes. Is there a way/algorithm to detect ...