Extracting decrypt key for AES from openssl on client side












2















I have implemented AES 128 encrypt and decrypt functions and tested it with sample data and it checks out perfectly. I used the following reference:
https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.197.pdf



Next I implemented a dummy SSL client and SSL server which uses openssl to send and receive data. It is working without any error and the messages are exchanged seamlessly.



My main goal here is to use openssl for initial handshake sequence. Once the connection is established between server and client, decrypt the incoming message (this time not using the openssl api but rather by using the decrypt AES function implemented earlier) and print and similarly for outgoing message. We will focus on incoming messages.



For this of course I will need the decrypt key and IV. I got the decrypt key(read key) on client side like following: (ssl is the SSL* structure of openssl for the established connection, I am accessing the source code structures of openssl directly)



//following struct copied from crypto/evp/e_aes.c

typedef struct {

    union {

        double align;

        AES_KEY ks;

    } ks;

    block128_f block;

    union {

        cbc128_f cbc;

        ctr128_f ctr;

    } stream;

} EVP_AES_KEY;



[Client Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_read_ctx);

cipher_data->ks.ks.rd_key  --> this is the decrypt key


I used this key to decrypt the incoming message with the AES decrypt function but in vain.



Now AES is symmetric encryption so I thought let me check the encrypt(write) key on the server side. The encrypt key on server should be equal to decrypt key on client side. I got the encrypt key on server like following:



[Server Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_write_ctx);

cipher_data->ks.ks.rd_key  --> this is the encrypt key


To my surprise they are different. Now if I use the above encrypt key of server to decrypt the message on the client side. The message is decrypted successfully.(as expected, the key used for encrypting the message is used to decrypt the message in AES standard).



So I reach the following inferences:




  1. The decrypt key which is acquired on the client side is encrypted in some way in openssl?

  2. My method for getting the decrypt key on client side is wrong.


How can I get the decrypt key on the client side which I can use in the AES decryption routine?






ssl openssl aes







share|improve this question




















  • 2





    OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

    – dave_thompson_085
    Nov 14 '18 at 13:56













  • What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

    – Robert
    Nov 14 '18 at 19:31


















2















I have implemented AES 128 encrypt and decrypt functions and tested it with sample data and it checks out perfectly. I used the following reference:
https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.197.pdf



Next I implemented a dummy SSL client and SSL server which uses openssl to send and receive data. It is working without any error and the messages are exchanged seamlessly.



My main goal here is to use openssl for initial handshake sequence. Once the connection is established between server and client, decrypt the incoming message (this time not using the openssl api but rather by using the decrypt AES function implemented earlier) and print and similarly for outgoing message. We will focus on incoming messages.



For this of course I will need the decrypt key and IV. I got the decrypt key(read key) on client side like following: (ssl is the SSL* structure of openssl for the established connection, I am accessing the source code structures of openssl directly)



//following struct copied from crypto/evp/e_aes.c

typedef struct {

    union {

        double align;

        AES_KEY ks;

    } ks;

    block128_f block;

    union {

        cbc128_f cbc;

        ctr128_f ctr;

    } stream;

} EVP_AES_KEY;



[Client Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_read_ctx);

cipher_data->ks.ks.rd_key  --> this is the decrypt key


I used this key to decrypt the incoming message with the AES decrypt function but in vain.



Now AES is symmetric encryption so I thought let me check the encrypt(write) key on the server side. The encrypt key on server should be equal to decrypt key on client side. I got the encrypt key on server like following:



[Server Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_write_ctx);

cipher_data->ks.ks.rd_key  --> this is the encrypt key


To my surprise they are different. Now if I use the above encrypt key of server to decrypt the message on the client side. The message is decrypted successfully.(as expected, the key used for encrypting the message is used to decrypt the message in AES standard).



So I reach the following inferences:




  1. The decrypt key which is acquired on the client side is encrypted in some way in openssl?

  2. My method for getting the decrypt key on client side is wrong.


How can I get the decrypt key on the client side which I can use in the AES decryption routine?






ssl openssl aes







share|improve this question




















  • 2





    OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

    – dave_thompson_085
    Nov 14 '18 at 13:56













  • What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

    – Robert
    Nov 14 '18 at 19:31
















2












2








2








I have implemented AES 128 encrypt and decrypt functions and tested it with sample data and it checks out perfectly. I used the following reference:
https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.197.pdf



Next I implemented a dummy SSL client and SSL server which uses openssl to send and receive data. It is working without any error and the messages are exchanged seamlessly.



My main goal here is to use openssl for initial handshake sequence. Once the connection is established between server and client, decrypt the incoming message (this time not using the openssl api but rather by using the decrypt AES function implemented earlier) and print and similarly for outgoing message. We will focus on incoming messages.



For this of course I will need the decrypt key and IV. I got the decrypt key(read key) on client side like following: (ssl is the SSL* structure of openssl for the established connection, I am accessing the source code structures of openssl directly)



//following struct copied from crypto/evp/e_aes.c

typedef struct {

    union {

        double align;

        AES_KEY ks;

    } ks;

    block128_f block;

    union {

        cbc128_f cbc;

        ctr128_f ctr;

    } stream;

} EVP_AES_KEY;



[Client Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_read_ctx);

cipher_data->ks.ks.rd_key  --> this is the decrypt key


I used this key to decrypt the incoming message with the AES decrypt function but in vain.



Now AES is symmetric encryption so I thought let me check the encrypt(write) key on the server side. The encrypt key on server should be equal to decrypt key on client side. I got the encrypt key on server like following:



[Server Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_write_ctx);

cipher_data->ks.ks.rd_key  --> this is the encrypt key


To my surprise they are different. Now if I use the above encrypt key of server to decrypt the message on the client side. The message is decrypted successfully.(as expected, the key used for encrypting the message is used to decrypt the message in AES standard).



So I reach the following inferences:




  1. The decrypt key which is acquired on the client side is encrypted in some way in openssl?

  2. My method for getting the decrypt key on client side is wrong.


How can I get the decrypt key on the client side which I can use in the AES decryption routine?






ssl openssl aes







share|improve this question
















I have implemented AES 128 encrypt and decrypt functions and tested it with sample data and it checks out perfectly. I used the following reference:
https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.197.pdf



Next I implemented a dummy SSL client and SSL server which uses openssl to send and receive data. It is working without any error and the messages are exchanged seamlessly.



My main goal here is to use openssl for initial handshake sequence. Once the connection is established between server and client, decrypt the incoming message (this time not using the openssl api but rather by using the decrypt AES function implemented earlier) and print and similarly for outgoing message. We will focus on incoming messages.



For this of course I will need the decrypt key and IV. I got the decrypt key(read key) on client side like following: (ssl is the SSL* structure of openssl for the established connection, I am accessing the source code structures of openssl directly)



//following struct copied from crypto/evp/e_aes.c

typedef struct {

    union {

        double align;

        AES_KEY ks;

    } ks;

    block128_f block;

    union {

        cbc128_f cbc;

        ctr128_f ctr;

    } stream;

} EVP_AES_KEY;



[Client Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_read_ctx);

cipher_data->ks.ks.rd_key  --> this is the decrypt key


I used this key to decrypt the incoming message with the AES decrypt function but in vain.



Now AES is symmetric encryption so I thought let me check the encrypt(write) key on the server side. The encrypt key on server should be equal to decrypt key on client side. I got the encrypt key on server like following:



[Server Side]

EVP_AES_KEY *cipher_data;

cipher_data = EVP_CIPHER_CTX_get_cipher_data(ssl->enc_write_ctx);

cipher_data->ks.ks.rd_key  --> this is the encrypt key


To my surprise they are different. Now if I use the above encrypt key of server to decrypt the message on the client side. The message is decrypted successfully.(as expected, the key used for encrypting the message is used to decrypt the message in AES standard).



So I reach the following inferences:




  1. The decrypt key which is acquired on the client side is encrypted in some way in openssl?

  2. My method for getting the decrypt key on client side is wrong.


How can I get the decrypt key on the client side which I can use in the AES decryption routine?






ssl openssl aes




ssl openssl aes






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 14 '18 at 8:40







user10589957

















asked Nov 14 '18 at 8:26









user10589957user10589957

112




112








  • 2





    OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

    – dave_thompson_085
    Nov 14 '18 at 13:56













  • What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

    – Robert
    Nov 14 '18 at 19:31
















  • 2





    OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

    – dave_thompson_085
    Nov 14 '18 at 13:56













  • What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

    – Robert
    Nov 14 '18 at 19:31










2




2





OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

– dave_thompson_085
Nov 14 '18 at 13:56







OpenSSL's AES_KEY is not the key; it is the key schedule with a tweak. For encryption, the first 1, 1.5 or 2 round keys are the 'user' key, but for decryption using the equivalent-inverse form (5.3.5 in FIPS197) the round keys are premultiplied (in GF/11B) by the InvMixColumns matrix, plus OpenSSL reverses the order so Rn is at subscripts 0..3 and R0 is at subscripts 4n..4n+3; see crypto/aes/aes_core.c in the source. It should work to take Rn and possibly Rn-1 (depending on key size) and re-multiply them by forward MixColumns, but I haven't tried it.

– dave_thompson_085
Nov 14 '18 at 13:56















What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

– Robert
Nov 14 '18 at 19:31







What is an dummy SSL client/server? Does it actually implement the SSL/TLS protocol or not. If not it is just a custom encrypted connection, most likely insecure and vulnerable to dozens of attacks. Just use TLS1.2/1.3 instead and everything will be fine.

– Robert
Nov 14 '18 at 19:31














0






active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53295824%2fextracting-decrypt-key-for-aes-from-openssl-on-client-side%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53295824%2fextracting-decrypt-key-for-aes-from-openssl-on-client-side%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

Florida Star v. B. J. F.

Image
Florida Star v. B. J. F. From Wikipedia, the free encyclopedia Jump to navigation Jump to search United States Supreme Court case Florida Star v. B. J. F. Supreme Court of the United States Argued March 21, 1989 Decided June 21, 1989 Full case name The Florida Star v. B. J. F. Citations 491 U.S. 524 ( more ) 109 S. Ct. 2603; 105 L. Ed. 2d 443; 1989 U.S. LEXIS 3120; 57 U.S.L.W. 4816; 16 Media L. Rep. 1801 Prior history The Florida Star v. B.J.F., 530 So.2d 286 (1988) Supreme Court of Florida; Florida Star v. B.J.F., 499 So.2d 883 (1986) Fla. Dist. Court of Appeals Holding Florida Stat. § 794.03 is unconstitutional to the extent it makes the truthful reporting of information that was a matter of public record unlawful, as it violates the First Amendment. Court membership Chief Justice William Rehnquist Associate Justices William J. Brennan Jr.  · Byron White Thurgood Marshall  · Harry Blac
Read more

Danny Elfman

Image
Danny Elfman From Wikipedia, the free encyclopedia Jump to navigation Jump to search Danny Elfman Elfman at the 2010 San Diego Comic-Con Born Daniel Robert Elfman ( 1953-05-29 ) May 29, 1953 (age 65) Los Angeles, California, U.S. Spouse(s) Bridget Fonda ( m.  2003) Children 1 Musical career Genres Rock [1] ska [2] new wave film music video game music Occupation(s) Composer, singer, songwriter, record producer Instruments Trombone guitar percussion vocals keyboards [3] Years active 1972–present Associated acts Oingo Boingo James Newton Howard Daniel Robert Elfman (born May 29, 1953) is an American composer, singer, songwriter, and record producer. Elfman first became known for being the lead singer and songwriter for the band Oingo Boingo from 1974 to 1995. He is well known for scoring films and television shows, particularly his frequent collabora
Read more

Retrieve a Users Dashboard in Tumblr with R and TumblR. Oauth Issues

Image
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 0 I am trying to use the TumblR package in R to set up the Oauth Authentication to Retrieve a user's dashboard using the second example in tumblR documentation However I get the following error, it seems that using twitter others have been able to use a different function to get around this, but I am not finding the same function available for Tumblr. See twitter package for R authentication: error 401 My code consumer_key <- OKey consumer_secret <- SKey appname <- App_name tokenURL <- 'http://www.tumblr.com/oauth/request_token' accessTokenURL <- 'http://www.tumblr.com/oauth/acces_token'
Read more