Re: How to decrypt a connection SSH v2?

On Wed, Jul 9, 2008 at 10:05 PM, Ulises2k <ulises2k_at_gmail.com> wrote:
> Hi,
> How to decrypt a connection SSH v2?
>
> I have the private and public keys.
>
> I have all sesion sniffed.

I'm afraid that's not enough. SSH implements forward secrecy [1],
which means that the server uses temporary (or ephemeral) keys to
encrypt the session traffic. Having the the private key doesn't give
you the ability to reverse the ephemeral keys and actually decrypt
session data.

PaulM

[1] http://en.wikipedia.org/wiki/Perfect_forward_secrecy

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------
Received on Jul 09 2008