Session key repository
In one implementation, a system for a session key repository includes a monitor engine to monitor communication between a first computing device and a second computing device that is encrypted with a private key, an identification engine to determine a number of session keys and session IDs that correspond to the encrypted communication, a rules engine to determine a number of rules for storing and sharing the number of corresponding session keys and session IDs, a repository engine to send a portion of the number of session keys and session IDs to a network tool based on the number of rules and identification of the network tool.
1. A system for a session key repository, comprising: a processing resource; and
a non-transitory computer-readable memory resource on which is stored computer-readable instructions that when executed by the processing resource, cause the processing resource to:
monitor communication between a first computing device and a second computing device, the communication being encrypted with a private key;
determine a number of session keys and session IDs that correspond to the encrypted communication;
determine a number of rules for storing and sharing the number of corresponding session keys and session IDs, the rules being based on content within the encrypted communication:
identify a network tool that is to decrypt at least a portion of the encrypted communication; and
send a portion of the number of session keys and session IDs to the identified network tool based on the number of rules.
2. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to store a number of captured communication packets (PCAPs) of the encrypted communication based on the number of rules.
3. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to decrypt portions of the encrypted communication with the number of corresponding stored session keys and session IDs.
4. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to send live communication to the identified network tool, wherein the live communication is encrypted by the private key.
5. The system of claim 4 , wherein the computer-readable instructions are further to cause the processing resource to receive a request for a number of session keys corresponding to the live communication from the network tool and to send a portion of the requested number of session keys to the network tool based on the number of rules.
6. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to define a content type of the encrypted communication to store and share the number of session keys and session IDs to be stored by the processing resource.
7. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to determine when the network tool is authorized to access the portion of the number of session keys and session IDs based on the number of rules.
8. The system of claim 1 , wherein the computer-readable instructions are further to cause the processing resource to send the portion of the number of session keys and session IDs to the identified network tool without sending the private key to the identified network tool.
9. A non-transitory computer readable medium storing instructions executable by a processing resource that, when executed by the processing resource, cause the processing resource to:
identify a number of session keys and session IDs for a packet of encrypted communication between a first computing device and a second computing device, the packet being encrypted with a private key;
store the number of session keys and session IDs in a session key repository based on a number of rules, the rules being based on content within the encrypted communication:
identify a network tool that is to decrypt at least a portion of the encrypted communication;
send the packet of encrypted communication to the identified network tool; receive a request from the identified network tool for the number of session keys corresponding to the sent packet of encrypted communication; and
provide a portion of the number of session keys and session IDs to the identified network tool based on an authorization of the identified network tool and the number of rules.
10. The medium of claim 9 , wherein the instructions to identify the number of session keys and session IDs include instructions to utilize the private key to identify the session key and the session ID.
11. The medium of claim 9 , wherein the number of rules define a content type of communication for storing the number of session keys and session IDs.
12. The medium of claim 11 , wherein the number of rules are based on at least one of: HTTP content, a number of components of an HTML page, a subject of the encrypted communication, a category of the encrypted communication, a department associated with the encrypted communication, an IP range, a table name as a result of a query, a table value as a result of a query, and a number of TCP properties the encrypted communication.
13. The medium of claim 9 , wherein the instructions, when executed, cause the processing resource to provide the portion of the number of session keys and session IDs to the identified network tool without sending the private key to the identified network tool.
14. A method for providing a session key repository, comprising:
determining, by a protocol element, a session key and a session ID corresponding to a communication session between a first computing device and a second computing device, the communication session being established with a private key;
storing, by the protocol element, the session key and the session ID into the session key repository based on a number of rules, wherein the rules are based on content within the communication session and define a content type of the communication session;
identifying, by the protocol element, a network tool that is to decrypt at least a portion of an encrypted communication; and
providing, by the protocol element, the session key to the identified network tool based on an authorization of the identified network tool and the number of rules.
15. The method of claim 14 , comprising decrypting, by the identified network tool, communication of the communication session utilizing the session key and the session ID.
16. The method of claim 15 , wherein the private key associated with the communication session is an unknown private key for the identified network tool.
17. The method of claim 15 , wherein decrypting communication of the communication session includes decrypting a portion of the communication session that corresponds to the provided session key.
18. The method of claim 14 , wherein providing the session key further comprises sending the session key to the identified network tool without sending the private key to the identified network tool.