search

warhawkreborn / connector_cli

Connector to allow discovery of servers (CLI version)
10 stars 5 forks source link

Warhawk traffic is SSL/TLS encrypted? #18

Open davidsummers opened 4 years ago

davidsummers commented 4 years ago

I finally took a look at the contents of the packets being sent back and forth between the client and the server in a WarHawk game.

It looks to me like the packets are encrypted with SSL/TLS since I saw a request and response that mentioned:

US1/CA1/San Diego110/ SONY Computer Entertainment America Inc/SCERT Group Root Authority/Warhawk BR SCEA PS3

Have you or anyone else taken a look at this yet?

If it is encrypted with SSL/TLS, then baring a fault in the encryption, I don't think we are going to be able to see what the contents of the packets are.

The only other way I could see this happening is if someone is able to find the private SSL/TLS key by emulating the PS3 and running WarHawk and look at the content which might contain the private SSL/TLS key.

Let me know if you have any ideas.

Thalhammer commented 4 years ago

It is not TLS not any other Standard. However it does use Certificates and RSA. I do have the keys (at least for the v1.0 but I doubt they changed) but they are not in a usable form. One would have to convert them to a PEM/DER file to use them in C/C++ code. If you wanna tackle that issue please message me via Discord as I don't wanna share them in public. It is kind of SSL but with worse security. Since the protocol is standard for multiple PS3 games there are people who looked into it and if you want to I can probably hook you up to some of them.

davidsummers commented 4 years ago

Oh, there you are! Glad you are OK.

OK, yes, at some point I would like to tackle this (unless someone else beats me to it).

When I do, I'll PM you on via Discord.

Thanks!