XOR-op / ja-tools

Library for parroting JA3/JA4 TLS fingerprints with rustls.
MIT License
2 stars 0 forks source link

How to modify EllipticCurve #1

Open vangork opened 1 month ago

vangork commented 1 month ago

Chrome ver.127 has the ja3 fingerprint of "772,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,65281-35-27-51-43-23-17513-13-18-45-16-5-65037-11-0-10,25497-29-23-24,0".

By following the example, ec value of 25497 is not able to set. Can you give some guidence for modifying ec part?

Thanks!

vangork commented 3 weeks ago

@XOR-op

XOR-op commented 3 weeks ago

X25519Kyber768 is a post-quantum algorithm, which hasn't been standardized by rustls (see this issue). I'm afraid changing this field without proper support by TLS library will cause bad incompatibility. However, you can still use the Unknown(u16) variant to set it to 25497, just at your own risk.