Tobias Brunner
5cab5672e7
Define plugin version in all existing plugins
2025-08-22 15:32:39 +02:00
Wataru Ashihara
c3f8642e72
save-keys: Fix Wireshark algorithm identifier for 3DES
...
Wireshark has shown the following error dialogue because the identifier
was incorrect [1]:
Error loading table 'ESP SAs': esp_sa:18: invalid value: TripleDes-CBC [RFC2451]
[1] https://github.com/wireshark/wireshark/blob/3757f42e5f0a8ee6b14a117a2fd99af759a31d98/epan/dissectors/packet-ipsec.c#L203
Closes strongswan/strongswan#2013
2024-03-18 08:54:41 +01:00
Tobias Brunner
a7ea181f0d
save-keys: Fix build with DEBUG_LEVEL < 0
2023-05-08 17:32:17 +02:00
Tobias Brunner
19ef2aec15
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
Thomas Egerer
4e29d6fac1
bus: Extend and reorder arguments of ike_derived_keys() hook
...
This now includes all key material derived for IKE_SAs in the order
defined in the RFC:
{SK_d | SK_ai | SK_ar | SK_ei | SK_er | SK_pi | SK_pr}
= prf+ (SKEYSEED, Ni | Nr | SPIi | SPIr)
Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com >
2021-06-07 17:08:27 +02:00
Tobias Brunner
875813c055
save-keys: Fix length of AES-GCM with 12-byte ICV
2021-02-23 17:28:46 +01:00
Michał Skalski
b6b8880340
save-keys: Add support for full-length HMAC-SHA256 for ESP
...
Wireshark doesn't really support it, but this way it at least decodes
the ESP packets correctly and the encryption keys are saved and the
packets can be decrypted. The full-length versions of SHA-384 and
SHA-512 are not supported by Wireshark as 256-bit is the longest ICV
it is able to decode currently.
2021-02-23 17:28:46 +01:00
Tobias Brunner
bac71410f3
save-keys: Add warning message to log if keys are being saved
2018-02-15 23:03:29 +01:00
Tobias Brunner
1da1ba01c4
save-keys: Add options to enable saving IKE and/or ESP keys
2018-02-15 23:03:29 +01:00
Codrut Cristian Grosu
88e151d10d
save-keys: Store derived CHILD_SA keys in Wireshark format
2018-02-15 23:03:29 +01:00
Codrut Cristian Grosu
4be7db5f60
save-keys: Store derived IKE_SA keys in Wireshark format
...
The path has to be set first, otherwise, nothing is done.
2018-02-15 23:03:29 +01:00
Codrut Cristian Grosu
345cd4684c
save-keys: Add save-keys plugin
...
This plugin will export IKE_SA and CHILD_SA secret keys in the format used
by Wireshark.
It has to be loaded explicitly.
2018-02-15 23:03:29 +01:00
Tobias Brunner