5 commits

Author	SHA1	Message	Date
Johanna Amann	fe4e06e8ca	TLS decryption: remove payload from ssl_encrypted_data again. ... There is no reason to make the payload available in the event - it is still encrypted.	2021-10-19 17:36:48 +02:00
Florian Wilkens	febc69d320	analyzer/ssl: cleanup SSL_Analyzer ... - make TLS12 PRF a member function of the analyzer - use std::string in PRF - use StringValPtr instead of zeek::StringVal - replace malloc/free with C++ style allocations	2021-05-11 19:12:16 +02:00
Florian Wilkens	c1c0cb6f3c	analyzer/ssl: Formatting, printf -> DBG_LOG, namespacing	2021-05-05 15:58:15 +02:00
Florian Wilkens	f73935aa45	ssl/decryption.zeek: cleanup	2021-05-05 15:41:36 +02:00
Florian Wilkens	2d950ffde9	ssl: rudimentary decryption for TLS 1.2 ... Several limitations still apply: - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 is the only supported cipher suite - Some tests are broken due to a failing assertion regarding bytestring - No newly written tests for decryption (the patch was tested extensively for our paper) - Several small open technical questions marked with FIXME - Architecture in the ssl module might not be optimal	2021-04-19 17:38:02 +02:00