High-speed analysis and recovering method for VPN encrypted channel

Abstract

The invention discloses a high-speed analysis and recovering method for a VPN encrypted channel. The method comprises the steps of high-speed analysis and recovering of a PPTP encrypted channel; high-speed analysis and recovering of an L2TP encrypted channel; and high-speed analysis and recovering of an IPSec active mode channel.The method starts from the bottom-layer protocol of the VPN channel, data link layer and network layer protocols of the VPN are emphatically studied, the security mechanism of the protocol is analyzed, unsafe points during an authentication interaction process and an encrypted transmission process are found, then an analysis and decoding method for the VPN encrypted channel is provided, and sensitive information on the VPN encrypted channel is further recovered in real time. The high performance computation technology in the method can effectively improve the decoding speed, reduces attack time and spatial complexity of encryption algorithms such as RC4 and DES in the VON, and enlarges categories of cracking algorithms by integrating Hashcat source codes.

Description

technical field [0001] The invention relates to a high-speed analysis and restoration method of a VPN encrypted channel. Background technique [0002] VPN (Virtual Private Network) is a security mechanism for establishing a private network on a public network for encrypted communication. It is widely used in Internet and enterprise network. VPN realizes the encryption of data packets and the remote access of data packets through tunnels (tunnels). VPN has a variety of key technologies, including secure tunnel technology, key management technology, access control technology and user identity authentication technology. Combined with different authentication and encryption methods, there are many types of VPNs on the Internet at present. Among them, the mainstream VPN encryption protocols include PPTP, L2TP, IPSec, L2TP / IPSec, etc., using VPN technology to log in to overseas VPN servers, not only bypassing the country’s control of information Network supervision, and in the ...

AI Technical Summary

Problems solved by technology

Domestic institutions and universities are still in the stage of manual traffic analysis for VPN deciphering research, and there is no practical deciphering method for deciphering the IPSec security mechanism. For the PPTP encryption protocol, the encrypted traffic is mainly decrypted by software capture and analysis. This method is mainly for the use of PPTP data packets with simple and outdated encryption mechanisms such as PAP have great application limitations, and the traffic analysis requires a lot of work time, and the analysis process is manual and cumbersome, without timeliness and high speed.

Images