Wireshark mailing list archives
Possible to decrypt aes256-sha1 ESP packets with secret?
From: David Dean via Wireshark-users <wireshark-users () wireshark org>
Date: Sun, 9 Feb 2020 19:00:54 +0000 (UTC)
Hi, I have a packet capture from a site-to-site VPN that I need to decode. Here are the encryption options: authby=secret keyexchange=ike ike=aes256-sha1;modp1024 phase2=esp phase2alg=aes256-sha1;modp1024 pfs=no The client has provided me with the shared secret. I've tried adding the ESP SAs, but I can't see aes256-sha1 listed in the algorithms. I'm using Wireshark v3.2.1 with Gcrypt 1.8.3. Is it not possible to decode aes256-sha1 with Wireshark? If it is possible, what options should I be choosing in the ESP SA window? Thanks, Dave
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Possible to decrypt aes256-sha1 ESP packets with secret? David Dean via Wireshark-users (Feb 09)