TLS Handshake Deep Dive and decryption with Wireshark

[@davidbombal]

// Wireshark pcap // davidbombal.wiki/tlsedpcap // Ed's TLS course // davidbombal.wiki/edtls49 Use coupon code: "BombalTLS" to get for $49 // MENU // 00:00 ▶ Introduction 02:11 ▶ How SSL/TLS is shown in a browser 02:40 ▶ Pre-Requisites 05:15 ▶ Data Integrity/Hashing 06:27 ▶ Potential Problems with Hashing/man in-the-middle attack 07:32 ▶ Message Authentication Code 10:09 ▶ Prerequisites continued 11:51 ▶ Symmetric Encryption 12:45 ▶ Asymmetric Encryption 17:00 ▶ Private and Public Keys 20:05 ▶ Signatures 21:55 ▶ Protocols 22:50 ▶ SSL/TLS Handshake, Client Hello and Server Hello 28:35 ▶ Client Hello and Server Hello in Wireshark 34:09 ▶ Certificate 35:12 ▶ Server Done 35:35 ▶ Server Hello, Certificate, Server Hello Done in Wireshark 36:51 ▶ Client Key Exchange 50:26 ▶ Client Key Exchange in Wireshark 51:39 ▶ Client Change Cipher Spec and Finished/Encrypted Verification 54:08 ▶ Server Change Cipher Spec and Finished/Encrypted 56:10 ▶ SSL/TLS Handshake in Wireshark 57:44 ▶ Decrypting a PreMaster Key with a Private Key in Wireshark 1:03:15 ▶ Where to get in contact with Ed to learn more // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: twitter.com/davidbombal Instagram: instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal KZbin: kzbin.info // Ed's SOCIAL // Twitter: twitter.com/ed_pracnet KZbin: kzbin.info/door/KmU-GKiukM8LYjkJFb8oBQ // Ed's TLS course // davidbombal.wiki/edtls49 Use coupon code: "BombalTLS" to get for $49 // More detail on Ed's KZbin channel and website // Asymmetric Encryption explained from a Practical Perspective: www.practicalnetworking.net/practical-tls/rsa-diffie-hellman-dsa-asymmetric-cryptography-explained/ RSA Algorithm: kzbin.info/www/bejne/hqKbmIGYq8uUpa8 DH Algorithm: kzbin.info/www/bejne/gYnUYWlrjtejn7c Practical TLS - Crypto & SSL/TLS foundation: kzbin.info/aero/PLIFyRwBY_4bTwRX__Zn4-letrtpSj1mzY // MY STUFF // www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [e-mail] Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

[@gangsternecoarc]

"8026 This link has been deleted by the owner." pcap unavailable

[@dariom9931]

That's my TLS teacher! 😂 Go Ed !

[@mesutisleyen8828]

It is great to meet ed, It has been always to complicated topics when I was in school. Loved it !!

[@jongxina3595]

By far the best video on TLS ive ever seen. Amazing.

[@PracticalNetworking]

[@paddymcgrath605]

That was the best tutorial on SSL I've seen. Ed is a fantastic layman's terms teacher. I'll definitely be taking up the coupon and doing the course.

[@jonathantx]

This is absolutely insane and awesome at the same time. Like always these deep dive sessions are great and they are dumbed down enough for me to understand LOL, keep them coming.

[@benedictjojo5761]

this is brilliant! learnt a lot today!

[@amitpatil1900]

Awesome stuff, enjoyed lot, looking forward to see how Pre-Master secret shared with DH, Thank you both!!

[@ehcankur]

Ed has so much of knowledge, that i can see , from all that i can say that dialog If I know even half of what you know, my little mind will explode

[@PracticalNetworking]

[@davidmorenocerdas6161]

A gift from Network Gurus !, Amazing.

[@ketansharma6955]

This was absolutely awesome, I was not able to understand a lot of it, but what I did, was awesome.

[@theanonymous6198]

Hey bro can you help me to decrypt my handshake plz I have tried almost all the thing like aircrack all kali linux wordlist, guthub, crackstation, hashcat, hashcat rules and also brutforce attack a entire weak on Google cloud

[@henryhrose1]

Great Explanation, one of the rarest to have such deep understanding on TLS

[@drakouzdrowiciel9237]

I feel like I have a much better understanding of TLS now, thanks to this video.

[@gameranonymous6152]

Thank's for this david,nice video 🔥🔥,keep going

[@parhambozorgi1376]

this was just awesome lecture, i have learned a lot TLS and SSL, thank you.

[@DandReiOwnU]

Free education! Thank you David and Ed.

[@PracticalNetworking]

You're welcome, Andreius!

[@AnantaAkash.Podder]

Thank You Very Much Sir... This is the Best Video with full tutorial...❤️❤️❤️

[@rajneeshrai1781]

Love to see another episode of this series...

[@PracticalNetworking]

David and I are in discussion to do another one later this month ;) Stay tuned!

[@Qupear]

it's nice how informative this video is and with minimum amount of advertisement. this is what any video hosting should look like)).

[@freestylebeginner]

THIS PRESENTATION IS LEGENDARY MATE

[@adedejiemmanuel1]

Thank you David and Ed.

[@vigneshmurugasamy7247]

Excellent is the word!!! Thanks David!

[@davidbombal]

Glad you liked it Vignesh!

[@MaximusIA]

Many thanks for this demo ❣

[@scottspa74]

Every time I listen to Ed, (almost daily), I mostly just feel dumber. Dude is tooo smart.

[@PracticalNetworking]

[@ІгорРадецкий]

Real pleasure of knowledge, something reminded, me these days.

[@anthonytheslav9887]

deep was counted 346 times in 24 mins . truly got deep quickly deeply . I kid , great vid! thx so much

[@theanonymous6198]

Hey bro can you help me to decrypt my handshake plz I have tried almost all the thing like aircrack all kali linux wordlist, guthub, crackstation, hashcat, hashcat rules and also brutforce attack a entire weak on Google cloud

[@gerorgemerner639]

Thank you for this enjoyable.

[@sharathugranad1646]

The best explanation I have ever come across about TLS. Thank you

[@Nationalist04]

I have read this comment literally on 100s of videos on KZbin, but this one i am writing down in straight from my heart. Best video on TLS , i could understand it easily with so much details in it.

[@PracticalNetworking]

Thank you for the kind words, Rahul. Glad you enjoyed it =)

[@JeffGrimes-i1s]

two excellent sources of information, lucky they post

[@Most_liked_videos]

TLS, Cryptography, Session mgt, Tunneling everything explained in a single session.. amazing superstuff

[@PracticalNetworking]

Glad you enjoyed it!

[@JorgeHidalgojh300]

Brilliant material

[@innovationsurvival]

Spectacular video. I will probably sign up for Ed's online SSL/TLS course. Thank you both.

[@mohamedhabas7391]

Truly fantastic stuff

[@formlessval]

Thanks alot for those deep dive

[@bobburke4336]

Great session. Ed from practical networking is awesome!

[@suryapandey3109]

Great explained

[@HahnC]

I had a job interview the other day and they I asked me about this SSL/TLS and I couldn't answer properly, this is very helpfull to know and very important info for any network engineer nowdays that security is very important.

[@Odim65]

Now it's the about the 7th or more round to watch this and I think I have really decrypted the idea on this !!! Many thanks David and Ed. Keep the deep dive coming.

[@lienn8032]

Excellent session! Thank you.

[@Dvkpainter]

Do more videos with Ed😅😅This was informative😊

[@kasundusmantha4775]

thanks david...

[@mighty1243]

WOW !! Such a detailed explanation

[@FernandoFischer6048]

55:55 You need to watch this again? are you kidding me? this is 100 Gold Content, I need to watch this at least 10 Times, 1000 000 thanks! the content you create is amazing David!

[@davidbombal]

Thank you! Love that! 😀

[@Thebanday]

Watched many Videos on TSL/SSL but the way you explained and even demonstrated with Wireshark was just great.. Thanks for this video

[@faustochavez9830]

Ed is awesome!!

[@PracticalNetworking]

[@pleasethink4789]

Holy crap, this video was so freakin excellent! Thanks

[@geoffreyvanwyk4588]

Thanks for the coupon. I bought the course.

[@PracticalNetworking]

Excellent! Welcome!

[@brodierobson4490]

This video was amazing. Thanks!

[@PracticalNetworking]

Glad you enjoyed it, Brodie!

[@edouardmalot51]

Simple and clear, really Nice again

[@PracticalNetworking]

Glad you enjoyed it, Edouard!

[@edouardmalot51]

@@PracticalNetworking I buy your course, and start it yesterday night :)

[@PracticalNetworking]

@@edouardmalot51 Welcome to the party =).

[@Alain9-1]

of course we will be glad if you provide details about cbc, rsa and aes

[@PracticalNetworking]

Oh yes! We pick apart AES / CBC / GCM, all the good stuff. The RSA video is free on youtube, if you want to sample that one. See the link in the Description "RSA Algorithm"

[@devanandjha5284]

I am a subscriber of Ed paid course on tls ...He is just awesome trainer ! i am a big fan of jeremy it lab as well

[@PracticalNetworking]

[@md.mrahman989]

Awesome!! Presentation!!

[@PracticalNetworking]

Thank you =)

[@dog-sitive]

just brilliant

[@sergioandrespinzonsarmient18]

Awesome video!

[@brocholy9289]

God dam bro you always found great peaople to your show

[@Hardik-li2kd]

Thank you Devid and Ed Harmoush :) for this video 🙏 I think this is the only video on KZbin that explains the TLS handshake in such detail.

[@hosseinshourabi398]

Great Job! Thank you so much.

[@PracticalNetworking]

You're welcome, Hosein!

[@sinos_karan9515]

Hi David sir ! Nice to meet you again with a good video #bombal

[@petercumiskey3188]

Brilliant Tutorial guys. Will definately take a look at the full course.

[@PracticalNetworking]

Cheers Peter. Glad you enjoyed it !

[@aruneshjha7327]

Hey David. please call Ed for an ipsec deep dive ... There are lots stuff available but nothing comes close to what you guys (DAVID, CHRIS, ED) deliver. Thanks for sharing your amazing knowledge Ed.

[@abdullahquan7663]

Ed Harmoush is the best instructor in the world. I purchased his TLS course last year & could not be more satisfied - highly recommened

[@alejandroatriano9138]

great video

[@tamaspeter3599]

It was great! Thanks Ed & David! Finally I got the point!

[@PracticalNetworking]

Wohoo!

[@tamaspeter3599]

@@PracticalNetworking I have just started your SSL/TLS training! Recommenended for everyone!

[@moroccan_pentester]

those people were born to be great professors

[@orkhan.alibayli]

Best explanation I have ever seen.

[@PracticalNetworking]

Glad you enjoyed it, Orxan ;)

[@eles108]

Really cool. Thanks

[@prakashborah6989]

Loved it .. thankyou!!

[@WiredWisdom930]

Thank you so much Grandpa🥳

[@kevinbatdorf]

Ed, I want to go deep! Let’s go!

[@davidbombal]

Was that deep enough Kevin? Or do we need a deep, deep dive?

[@PracticalNetworking]

You'd probably love the course! David has a link you can use to access it for $50 in the description.

[@kevinbatdorf]

How deep can we go? It would be awesome to impliment the TLS protocol in Rust/Node/Python or another language even. I’ll check out the course! Love this stuff

[@PracticalNetworking]

@@kevinbatdorf For the purpose of learning the handshake, I love the idea. But it's generally recommended _against_ re-writing your own crypto modules. In contract to using modules that have already been vetted and studied by the industry. (of course, I say all that w/ a new vulnerability just discovered in OpenSSL, which just goes to show, even with a lot of funding and developers, bugs always make it through)

[@mikethompson7406]

I'm only 31 minutes in but this is the one video that finally made me feel comfortable with what's going on with certs!

[@mohamedaymenzebouchi]

U r the best!!!

[@davidbombal]

Thank you Mohamed!

[@zachfenton608]

That was wonderful. Great conversation.

[@mudasir2168]

loads of info....awesome stuff!

[@Agent_Orange_Peel]

Awesome video! Thanks.

[@anuragvashishth1564]

That was really fun learning TLS handshake though I do not belog to core networking but that was so interesting I watched it completely. Thank you @PracticalNetworking and @davidbombal for such content. Really appriciate 🙌

[@AniketAmdekar]

Love the Office references and the cartoon representation of Pam and Jim! Bye-bye Bob and Alice

[@PracticalNetworking]

When I teach this live I explain the messages sent by Pam and Jim as actually messages from the show. Tends to amuse the students.... and the instructor ;)

[@LuisGonzalez-m4e]

good video!

[@Anonymous-gt8zn]

Mind blowing that this all happens withn a second! 🤯

[@GrimComix]

So much good information

[@kabingiri119]

Love from Nepal 🇳🇵🇳🇵🇳🇵

[@davidbombal]

Thank you Kabin!

[@suryapandey3109]

Thanks David

[@robertroy1878]

Easily one of the best IT related videos I've ever watched....and I've watched hundreds as an online IT student.

[@PracticalNetworking]

Thank you for the kind words, Robert. Glad you enjoyed this !

[@zer0day463]

This guy is life saver xD. Amazing way of explaining stuff using simple layman analogies

[@zoranzasovski]

Crystal crisp explanations, just like Chris Greer. Really enjoying this videos of yours David!!! To continue further with Ed, perhaps DH overview and what are common issues with ssl where things might get wrong...Cheers!!!

[@PracticalNetworking]

[@jaysonjoy6467]

Sir, I bought your wireshark course. I think you are the best teacher on this platform.

[@davidbombal]

Thank you Jayson!

[@josephroiml]

I appreciate that David acts as an mediator between all these professionals and starting hackers, who are trying to find their way. Great concept.

[@tonymarques1624]

Thank you for the video. BTW the CIA Security triad is Confidentiality Integrity and AVAILABILITY. It has in recent year been augmented with Non-repudiability and Authentication.

[@raymondhernandez266]

Looks deep enough on my end. Happy to see the references to the individual Request for Comments (RFCs) in Ed's slides.

[@davidbombal]

Thank you Raymond!

[@PracticalNetworking]

=) This was only scratching the surface! ;)

[@ando440]

This is great. Loving this

[@jayrajgoyal9369]

Very methodically explained. Thanks to both Ed and David.

[@joerockhead7246]

Good stuff, David, & Ed. Thank you.

[@smithright]

AMAZING CONTENT, gents! :D

[@jingkangloh7710]

The content is so good! I learned so much!! Absolutely appreciate the efforts made to come up with this Technical Deep Dive video

[@nikhils1376]

Quality time spent. Thanks David!

[@macbethmabena9816]

Once again Mr David thanks so much. congratulations for hitting 900k followers. you have helped a lot of people. we really appreciate

[@C-a-m-y]

Excellent video, excellent explanations. Already shared with my team.

[@PracticalNetworking]

Fantastic. Hope they enjoy it too! =)

[@parheliaa]

Great stuff. Sure, more of this is appreciated

[@AapkaHostRick_]

this is gem 😍

[@kibar9155]

awesome content! very clear explained thanks!