Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to decrypt an SSH session with the public AND private key used for the session? I have a network capture of the packets, and I have no idea what tools I'd be able to use to do so. Can anyone point me in the right direction? I've tried searching for it, but the results don't really seem to be what I'm looking for. Thanks in advance! (If it matters, I'm in Ubuntu linux.)

share|improve this question

migrated from stackoverflow.com Oct 26 '09 at 3:22

This question came from our site for professional and enthusiast programmers.

    
Why are you trying to do this? –  SLaks Oct 25 '09 at 23:43
    
@Slaks: I've been trying to learn about encryption, and a friend of mine who's a computer guy told me to try to figure it out. Thing is, I think he's just messing around me, since he probably knows that I think it's possible. –  munchybunch Oct 25 '09 at 23:47
add comment

2 Answers 2

There is no way to do this due to the Diffie-Hellman key exchange, even if both sets of keys are known on both machines. These keys are not actually used to encrypt traffic.

Your options are patching the SSH server, or performing what's known as a 'man-in-the-middle' attack, since you know both the private and public keys of both machines, this is feasible.

share|improve this answer
add comment

You can try Wireshark. I know it can decrypt SSL traffic if you have the proper keys.

From their documentation:

Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2

share|improve this answer
    
Can it do SSH too? Can I apply the same process? (Trying it now.) –  munchybunch Oct 26 '09 at 0:10
    
It seems that there's a lot of options in the preferences for SSL, but no luck with SSH. ): –  munchybunch Oct 26 '09 at 0:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.