Bitcoin Forum
May 03, 2024, 07:33:38 PM
Welcome,
Guest
. Please
login
or
register
.
News
: Latest Bitcoin Core release:
27.0
[
Torrent
]
Home
Help
Search
Login
Register
More
Bitcoin Forum
>
Bitcoin
>
Bitcoin Technical Support
>
Decrypt Lightning Node Client Traffic
Pages: [
1
]
« previous topic
next topic »
Print
Author
Topic: Decrypt Lightning Node Client Traffic (Read 97 times)
simpleSliv3r
(OP)
Jr. Member
Offline
Activity: 46
Merit: 28
Decrypt Lightning Node Client Traffic
September 20, 2023, 08:57:33 AM
Merited
by
ABCbits
(1)
#1
Hi,
I need to sniff traffic from the p2p Lightning Network and check it using Wireshark or some other package capture program.
The issue here is that the traffic is encrypted. Is there any node implementation that has some option to extract the key used for encrypting that traffic?
If you know of any other solution to take that traffic and be able to read it without extracting the key from the node for example doing some man in the middle between the Node and the P2P network please, let me know.
Thank for reading!
Best Regards,
SS
1714764818
Hero Member
Offline
Posts: 1714764818
Ignore
1714764818
1714764818
#2
1714764818
Report to moderator
The forum was founded in 2009 by Satoshi and Sirius. It replaced a SourceForge forum.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1714764818
Hero Member
Offline
Posts: 1714764818
Ignore
1714764818
1714764818
#2
1714764818
Report to moderator
1714764818
Hero Member
Offline
Posts: 1714764818
Ignore
1714764818
1714764818
#2
1714764818
Report to moderator
DaveF
Legendary
Offline
Activity: 3472
Merit: 6259
Crypto Swap Exchange
Re: Decrypt Lightning Node Client Traffic
September 20, 2023, 01:42:10 PM
Merited
by
ABCbits
(2),
simpleSliv3r
(2)
#2
Assuming you are running the node and using LND as an example in the lnd.conf file you can specify the TLS certificate used:
https://docs.lightning.engineering/lightning-network-tools/lnd/lnd.conf
Not perfect and you won't get everything but anything connecting to your node can then be read.
As a cheat, if you just want to see what is going on in general you can setup a bunch of nodes that just talk to each other and read all of their traffic.
-Dave
█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
████
█
█████████
▄
███
██
███████
▄███
██
▐███
████
▄█████▀
███
████
██
▄████▀
███
▐████▄███▀
████
▐██████▀
█████
▀█████
█████
██████▄
████
████████▄
██
▄█████▀█████▄
▄██████
███
▀█████▀
█
█████
██████
▀██▀
██
██▀
█████████
▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c
.
h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█
▄█
█████▄▄▄
██
███████████▄▄
██
████
█████████
██
████
██
███████
██
████
██
███████
██
███████
██████
██
█░░████
█████
██
█▌▐████
█████
██
███████
████
██
█████████▀
██
████████▀
██
██████▀
░
▀
▀██▀▀
✔
Instant
✔
Non KYC
Crypto Swap Exchange
.
.
.
.
.
........
Bitcoin | Litecoin | Ethereum | Monero | Dash | ERC20 Tokens | more soon
........
.
.
.
.
.
▄███████████████████▄
███████
██
█
██
█████████
██▀▀▀▀▀
██
▀
██
▀▀███████
███
█████████████
▀████
█████
████
███▄
████
████
█████
████
███▀
████
████
█████
███████████
▀████
█████
████
████▄
████
███
█████
████
████▀
████
███
███
█████████████
▄████
ANN
THREAD
▄██████████████████▄
███████████▀▄▀██████
██████████▀
█
▄███████
████████▀▌
█
▄████████
████████▌▄
█
█████████
███████▀▄█
██
▀███████
████▀▄▄█
█
██
███
▀█████
███▀▄█▀▄██
█
█
████
████
███
█
█
█
█▀▄█▌▐
████
▐███
███
█
▌▐
█
█▀▌▐
█████
▐███
ONION
LINK
simpleSliv3r
(OP)
Jr. Member
Offline
Activity: 46
Merit: 28
Re: Decrypt Lightning Node Client Traffic
September 20, 2023, 07:24:27 PM
#3
Quote from: DaveF on September 20, 2023, 01:42:10 PM
Assuming you are running the node and using LND as an example in the lnd.conf file you can specify the TLS certificate used:
https://docs.lightning.engineering/lightning-network-tools/lnd/lnd.conf
Not perfect and you won't get everything but anything connecting to your node can then be read.
As a cheat, if you just want to see what is going on in general you can setup a bunch of nodes that just talk to each other and read all of their traffic.
-Dave
Hi Dave,
Thanks for your answer!
Checking the link you provided, I'm only able to see configuration for the TLS certificate on RPC connections.
I don't know if the node will use the same certificate, but I'm looking to read the p2p network messages (gossip protocol). I mean, the messages that are sent between the nodes.
DaveF
Legendary
Offline
Activity: 3472
Merit: 6259
Crypto Swap Exchange
Re: Decrypt Lightning Node Client Traffic
September 20, 2023, 08:21:14 PM
#4
I just read though and did a quick search of
https://github.com/lightning/bolts/blob/master/07-routing-gossip.md
and did not see anything mentioning encryption.
Odd, but you have to have some certificate someplace that you send your side to when they connect.
Didn't check, IS it even encrypted? I mean it's 'sudo public' information being sent.
-Dave
█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
████
█
█████████
▄
███
██
███████
▄███
██
▐███
████
▄█████▀
███
████
██
▄████▀
███
▐████▄███▀
████
▐██████▀
█████
▀█████
█████
██████▄
████
████████▄
██
▄█████▀█████▄
▄██████
███
▀█████▀
█
█████
██████
▀██▀
██
██▀
█████████
▀
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c
.
h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█
▄█
█████▄▄▄
██
███████████▄▄
██
████
█████████
██
████
██
███████
██
████
██
███████
██
███████
██████
██
█░░████
█████
██
█▌▐████
█████
██
███████
████
██
█████████▀
██
████████▀
██
██████▀
░
▀
▀██▀▀
✔
Instant
✔
Non KYC
Crypto Swap Exchange
.
.
.
.
.
........
Bitcoin | Litecoin | Ethereum | Monero | Dash | ERC20 Tokens | more soon
........
.
.
.
.
.
▄███████████████████▄
███████
██
█
██
█████████
██▀▀▀▀▀
██
▀
██
▀▀███████
███
█████████████
▀████
█████
████
███▄
████
████
█████
████
███▀
████
████
█████
███████████
▀████
█████
████
████▄
████
███
█████
████
████▀
████
███
███
█████████████
▄████
ANN
THREAD
▄██████████████████▄
███████████▀▄▀██████
██████████▀
█
▄███████
████████▀▌
█
▄████████
████████▌▄
█
█████████
███████▀▄█
██
▀███████
████▀▄▄█
█
██
███
▀█████
███▀▄█▀▄██
█
█
████
████
███
█
█
█
█▀▄█▌▐
████
▐███
███
█
▌▐
█
█▀▌▐
█████
▐███
ONION
LINK
simpleSliv3r
(OP)
Jr. Member
Offline
Activity: 46
Merit: 28
Re: Decrypt Lightning Node Client Traffic
September 21, 2023, 07:40:27 AM
Merited
by
ABCbits
(1)
#5
Quote from: DaveF on September 20, 2023, 08:21:14 PM
I just read though and did a quick search of
https://github.com/lightning/bolts/blob/master/07-routing-gossip.md
and did not see anything mentioning encryption.
Odd, but you have to have some certificate someplace that you send your side to when they connect.
Didn't check, IS it even encrypted? I mean it's 'sudo public' information being sent.
-Dave
I guess it is, for privacy and security reasons.
https://github.com/lightning/bolts/blob/master/08-transport.md
As far as I understand from here, it uses the node ID (a pubkey) to encrypt the traffic.
SS
NotATether
Legendary
Offline
Activity: 1596
Merit: 6726
bitcoincleanup.com / bitmixlist.org
Re: Decrypt Lightning Node Client Traffic
September 21, 2023, 07:51:43 AM
Merited
by
DaveF
(3),
simpleSliv3r
(3),
ABCbits
(2)
#6
Quote from: simpleSliv3r on September 21, 2023, 07:40:27 AM
I guess it is, for privacy and security reasons.
https://github.com/lightning/bolts/blob/master/08-transport.md
As far as I understand from here, it uses the node ID (a pubkey) to encrypt the traffic.
SS
It looks like it's a non-standard authentication method, not using TLS but it is using keys on the secp256k1 curve and a form of ECDH called
Noise_XK
.
In order to get the session key that is generated by this algorithm which encrypts the traffic, you'll have to find a utility which allows you to replicate the Noise_XK key exchange process.
.
.
B
L
A
C
K
J
A
C
K
♠
F
U
N
.
███
▄
██
██
██
█████
██
██
██
███
▀
██
████████
██
███
██
██████
██
██
██
██
██
████████
██
██
▄▄
░██
████
██
█████
▀░▀▀
██
████████████
████
░██
██████████
██
██████
█
██
███
██
███
▄
░████
██████
██
██
▀
███████
███
██
██
██
███
██████
██░██
██████
██
██
CRYPTO
CASINO
&
SPORTS
BETTING
│
.
REWARD SYSTEM
.
E
L
I
T
E
S
E
A
T
..
│
▄▄███████▄▄
▄████
███████
████▄
███
█████████████
███
██
█████
█████████
███
██
██
█████
██
██
██
████████
██
██
█████
███████████
█████
██
██
█████
██
███
██
█████████
██
██
██████
██████
█████████
██
██
█████████
██
████████
██
██
████████
██
███████
██
███
████
███
██████
███
▀████
███████
████▀
█
█
█
█
█
█████████
█
█
█
█
█
.
Whitepaper
J
A
C
K
simpleSliv3r
(OP)
Jr. Member
Offline
Activity: 46
Merit: 28
Re: Decrypt Lightning Node Client Traffic
September 21, 2023, 05:04:21 PM
Last edit: September 21, 2023, 08:40:15 PM by simpleSliv3r
#7
Quote from: NotATether on September 21, 2023, 07:51:43 AM
It looks like it's a non-standard authentication method, not using TLS but it is using keys on the secp256k1 curve and a form of ECDH called
Noise_XK
.
In order to get the session key that is generated by this algorithm which encrypts the traffic, you'll have to find a utility which allows you to replicate the Noise_XK key exchange process.
Thank you!
It looks like it. If anyone knows how to do it it will really help.
SS
Pages: [
1
]
Print
Bitcoin Forum
>
Bitcoin
>
Bitcoin Technical Support
>
Decrypt Lightning Node Client Traffic
« previous topic
next topic »
Jump to:
Please select a destination:
-----------------------------
Bitcoin
-----------------------------
=> Bitcoin Discussion
===> Legal
===> Press
===> Meetups
===> Important Announcements
=> Development & Technical Discussion
===> Wallet software
=====> Electrum
=====> Bitcoin Wallet for Android
=====> BitcoinJ
=====> Armory
=====> Mycelium
=====> Hardware wallets
=> Mining
===> Mining support
===> Pools
===> Mining software (miners)
===> Hardware
=====> Group buys
===> Mining speculation
=> Bitcoin Technical Support
=> Project Development
-----------------------------
Economy
-----------------------------
=> Economics
===> Speculation
=> Marketplace
===> Goods
=====> Computer hardware
=====> Digital goods
=======> Invites & Accounts
=====> Collectibles
===> Services
===> Currency exchange
===> Gambling
=====> Games and rounds
=====> Investor-based games
=====> Gambling discussion
===> Lending
=====> Long-term offers
===> Securities
===> Auctions
===> Service Announcements
=====> Micro Earnings
===> Service Discussion
=====> Web Wallets
=====> Exchanges
=> Trading Discussion
===> Scam Accusations
===> Reputation
-----------------------------
Other
-----------------------------
=> Meta
===> New forum software
===> Bitcoin Wiki
=> Politics & Society
=> Beginners & Help
=> Off-topic
=> Serious discussion
===> Ivory Tower
=> Archival
===> Корзина
===> CPU/GPU Bitcoin mining hardware
===> Chinese students
===> Obsolete (buying)
===> Obsolete (selling)
===> MultiBit
-----------------------------
Alternate cryptocurrencies
-----------------------------
=> Altcoin Discussion
=> Announcements (Altcoins)
===> Tokens (Altcoins)
=> Mining (Altcoins)
===> Pools (Altcoins)
=> Marketplace (Altcoins)
===> Service Announcements (Altcoins)
===> Service Discussion (Altcoins)
===> Bounties (Altcoins)
=> Speculation (Altcoins)
-----------------------------
Local
-----------------------------
=> العربية (Arabic)
===> العملات البديلة (Altcoins)
=====> النقاشات
===> إستفسارات و أسئلة المبتدئين
===> التعدين
===> النقاشات الأخرى
===> منصات التبادل
=> Bahasa Indonesia (Indonesian)
===> Marketplace (Bahasa Indonesia)
===> Mining (Bahasa Indonesia)
===> Altcoins (Bahasa Indonesia)
===> Trading dan Spekulasi
===> Ekonomi, Politik, dan Budaya
===> Topik Lainnya
=> Español (Spanish)
===> Mercado y Economía
=====> Servicios
=====> Trading y especulación
===> Hardware y Minería
===> Esquina Libre
===> Mercadillo
=====> Mexico
=====> Argentina
=====> España
=====> Centroamerica y Caribe
===> Primeros pasos y ayuda
===> Altcoins (criptomonedas alternativas)
=====> Minería de altcoins
=====> Servicios
=====> Tokens (Español)
=> 中文 (Chinese)
===> 跳蚤市场
===> 山寨币
===> 媒体
===> 挖矿
===> 离题万里
=> Hrvatski (Croatian)
===> Trgovina
===> Altcoins (Hrvatski)
=====> Announcements (Hrvatski)
===> Off-topic (Hrvatski)
=> Deutsch (German)
===> Anfänger und Hilfe
===> Mining (Deutsch)
===> Trading und Spekulation
===> Projektentwicklung
===> Off-Topic (Deutsch)
===> Treffen
===> Presse
===> Altcoins (Deutsch)
=====> Announcements (Deutsch)
===> Marktplatz
=====> Auktionen
=====> Suche
=====> Biete
=> Ελληνικά (Greek)
===> Αγορά
===> Mining Discussion (Ελληνικά)
===> Altcoins (Ελληνικά)
=====> Altcoin Announcements (Ελληνικά)
=====> Altcoin Mining (Ελληνικά)
=> עברית (Hebrew)
=> Français
===> Actualité et News
===> Débutants
===> Discussions générales et utilisation du Bitcoin
===> Mining et Hardware
===> Économie et spéculation
===> Place de marché
=====> Échanges
=====> Produits et services
=====> Petites annonces
===> Le Bitcoin et la loi
===> Wiki, documentation et traduction
===> Développement et technique
===> Vos sites et projets
===> Hors-sujet
===> Altcoins (Français)
=====> Annonces
=> India
===> Mining (India)
===> Marketplace (India)
===> Regional Languages (India)
===> Press & News from India
===> Alt Coins (India)
===> Buyer/ Seller Reputations (India)
===> Off-Topic (India)
=> Italiano (Italian)
===> Guide (Italiano)
===> Progetti
===> Discussioni avanzate e sviluppo
===> Trading, analisi e speculazione
===> Mercato
=====> Mercato valute
=====> Beni
=====> Servizi
=====> Esercizi commerciali
=====> Hardware/Mining (Italiano)
=====> Gambling (Italiano)
===> Accuse scam/truffe
===> Mining (Italiano)
===> Alt-Currencies (Italiano)
=====> Annunci
===> Raduni/Meeting (Italiano)
===> Crittografia e decentralizzazione
===> Off-Topic (Italiano)
=> 日本語 (Japanese)
===> アルトコイン
=> Nederlands (Dutch)
===> Markt
===> Gokken/lotterijen
===> Mining (Nederlands)
===> Beurzen
===> Alt Coins (Nederlands)
===> Off-topic (Nederlands)
===> Meetings (Nederlands)
=> Nigeria (Naija)
===> Politics and society (Naija)
===> Off-topic (Naija)
=> 한국어 (Korean)
===> 대체코인 Alt Coins (한국어)
=> Pilipinas
===> Altcoins (Pilipinas)
=====> Altcoin Announcements (Pilipinas)
===> Pamilihan
===> Others (Pilipinas)
=> Polski
===> Tablica ogłoszeń
===> Alternatywne kryptowaluty
=====> Nowe kryptowaluty i tokeny
=====> Tablica ogłoszeń (altcoiny)
=> Português (Portuguese)
===> Primeiros Passos (Iniciantes)
===> Economia & Mercado
===> Mineração em Geral
===> Desenvolvimento & Discussões Técnicas
===> Criptomoedas Alternativas
===> Brasil
===> Portugal
=> Русский (Russian)
===> Новички
===> Бизнес
=====> Барахолка
=====> Обменники
===> Идеи
===> Кодеры
===> Майнеры
===> Политика
===> Трейдеры
===> Альтернативные криптовалюты
=====> Токены
=====> Бayнти и aиpдpoпы
===> Хайпы
===> Работа
===> Разное
===> Oбcyждeниe Bitcoin
=====> Новости
=====> Юристы
=> Română (Romanian)
===> Anunturi importante
===> Offtopic
===> Market
=====> Discutii Servicii
===> Minerit
===> Tutoriale
===> Bine ai venit!
===> Presa
===> Altcoins (Monede Alternative)
=====> Anunturi Monede Alternative
=> Skandinavisk
=> Türkçe (Turkish)
===> Bitcoin Haberleri
===> Pazar Alanı
===> Madencilik
===> Ekonomi
===> Servisler
=====> Fonlar
===> Proje Geliştirme
===> Alternatif Kripto-Paralar
=====> Madencilik (Alternatif Kripto-Paralar)
=====> Duyurular (Alternatif Kripto-Paralar)
===> Konu Dışı
===> Yeni Başlayanlar & Yardım
===> Buluşmalar
=> Other languages/locations
Loading...