[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    Re: [Wireshark-users] question about nas-eps cipher message
From:       Pascal Quantin <pascal.quantin () gmail ! com>
Date:       2014-02-15 15:12:17
Message-ID: CAGka-80x0kR-Wa=gi-70U0f42OWwR2z-zcQpU-8B5+NWVRx0yQ () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/related)]

[Attachment #4 (multipart/alternative)]


Hi,

There is a small heuristic trying to differentiate a ciphered and integrity
protected message from an integrity protected only message. Like any
heuristic, it can fail sometimes.

Best regards,
Pascal.
Le 15 févr. 2014 15:33, "damker" <damker@sina.com> a écrit :

>  for nas-eps cihper message，why sometimes do not decode the "Ciphered
> message"
>
>
> and sometimes do decode ？
>
>
>
>
> ------------------------------
> damker
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request@wireshark.org
> ?subject=unsubscribe
>

[Attachment #7 (text/html)]

<p dir="ltr">Hi,</p>
<p dir="ltr">There is a small heuristic trying to differentiate a ciphered and \
integrity protected message from an integrity protected only message. Like any \
heuristic, it can fail sometimes.</p> <p dir="ltr">Best regards,<br>
Pascal.</p>
<div class="gmail_quote">Le 15 févr. 2014 15:33, &quot;damker&quot; &lt;<a \
href="mailto:damker@sina.com">damker@sina.com</a>&gt; a écrit :<br \
type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 \
.8ex;border-left:1px #ccc solid;padding-left:1ex"> <u></u>





<div style="MARGIN:10px">
<div>for nas-eps cihper message，why sometimes do not decode the "Ciphered 
message"</div>
<div>  </div>
<div><img src="cid:_Foxmail.0@BE046683-E444-4977-8273-B6B02160103F"></div>
<div>  </div>
<div>and sometimes do decode ？</div>
<div>  </div>
<div><img src="cid:_Foxmail.1@D787B7EE-B7EA-4CDB-9403-8326302EB4A7"></div>
<div>  </div>
<div>  </div>
<div>  </div>
<hr style="min-height:1px;WIDTH:210px" align="left" color="#b5c4df" size="1">

<div><span>damker</span></div>
<div>  </div></div>
<br>___________________________________________________________________________<br>
Sent via:      Wireshark-users mailing list &lt;<a \
                href="mailto:wireshark-users@wireshark.org">wireshark-users@wireshark.org</a>&gt;<br>
                
Archives:      <a href="http://www.wireshark.org/lists/wireshark-users" \
                target="_blank">http://www.wireshark.org/lists/wireshark-users</a><br>
                
Unsubscribe: <a href="https://wireshark.org/mailman/options/wireshark-users" \
target="_blank">https://wireshark.org/mailman/options/wireshark-users</a><br>  \
mailto:<a href="mailto:wireshark-users-request@wireshark.org">wireshark-users-request@wireshark.org</a>?subject=unsubscribe<br></blockquote></div>


--001a11c154b62e79a604f27359ff--


["Catch9071.jpg" (image/jpeg)]
["Catch.jpg" (image/jpeg)]

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread]