Cunning With CNG - Soliciting Secrets From Schannel

Cunning With CNG - Soliciting Secrets From Schannel

Black Hat via YouTube Direct link

What are we trying to accomplish?

12 of 27

12 of 27

What are we trying to accomplish?

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Cunning With CNG - Soliciting Secrets From Schannel

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Black Hat Sound Bytes
  3. 3 Disclaimer
  4. 4 The infamous TLS Handshake
  5. 5 Perfect Forward Secrecy
  6. 6 Schannel & CNG
  7. 7 Schannel Prefered Cipher Suites
  8. 8 Microsoft's TLS/SSL Docs
  9. 9 Schannel Ops
  10. 10 CNG Key Isolation
  11. 11 Background Summary
  12. 12 What are we trying to accomplish?
  13. 13 The keys? What do they get us?
  14. 14 Session Keys
  15. 15 The Norypt SSL Provider (ncryptsslp.dll)
  16. 16 Pre-Master Secret (PMS)
  17. 17 Master Secret Mapped to Unique Identifier
  18. 18 Ephemeral & Persistent Private keys
  19. 19 9 Ephemeral Private Key
  20. 20 1 Persistent Private key
  21. 21 7 Decrypting Persistent Key - DPAPI
  22. 22 Session Ticket key
  23. 23 Decrypting Session Tickets
  24. 24 Inherent Metadata TLS Provides
  25. 25 Schannel Caching Parameters
  26. 26 This is your Schannel Cache (x64)
  27. 27 Limitations

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.