Int 4: TLS Handshake Analysis - Menganalisis HTTPS dari PCAP

cd ~ && mkdir crypto-int4 && cd crypto-int4

# 1. Analisis TLS handshake
echo "=== TLS 1.3 Handshake ==*"
echo ""
echo "Client                          Server"
echo "  |                                |"
echo "  |-- ClientHello -----------------|  (cipher suites, random, SNI)"
echo "  |   Supported: TLS_AES_256_GCM,  |"
echo "  |   TLS_CHACHA20_POLY1305, ...   |"
echo "  |                                |"
echo "  |-- ServerHello -----------------|  (selected cipher, random)"
echo "  |-- Certificate ----------------|  (X.509 chain)"
echo "  |-- ServerParams ---------------|  (EC Diffie-Hellman key)"
echo "  |                                |"
echo "  |-- ClientParams ----------------|  (ECDHE key)"
echo "  |-- [Change Cipher Spec] --------|"
echo "  |-- Finished (encrypted) --------|"
echo "  |                                |"
echo "  |-- [Change Cipher Spec] --------|"
echo "  |-- Finished (encrypted) --------|"
echo "  |                                |"
echo "  |===== SECURE CONNECTION ========|"
echo "  |      (AES-256-GCM encrypted)   |"
echo ""

# 2. Analisis cipher suite
echo "=== Cipher Suite Analysis ==*"
cat << 'CIPHER'
TLS_AES_256_GCM_SHA384  → TLS 1.3, AES-256, GCM mode, SHA384
TLS_CHACHA20_POLY1305   → TLS 1.3, ChaCha20, Poly1305 MAC
TLS_AES_128_GCM_SHA256  → TLS 1.3, AES-128, GCM mode, SHA256

Komponen cipher suite:
  [1] Key Exchange:  ECDHE (Ephemeral Diffie-Hellman) → Perfect Forward Secrecy
  [2] Auth:          ECDSA atau RSA → verifikasi identitas server
  [3] Encryption:    AES-256-GCM → bulk encryption (confidentiality)
  [4] MAC:           SHA384 → message integrity & authentication
CIPHER

# 3. Connect ke server real
echo "=== Cek TLS ke alfarisiazmir.my.id ==*"
openssl s_client -connect alfarisiazmir.my.id:443 -servername alfarisiazmir.my.id 2>&1 <<< "Q" | grep -E "(Protocol|Cipher|subject|issuer)" | head -10