Successfully connected
TLS 1.3 OK; HelloRetryRequest used; server-initiated key update accomplished;
Detailed description:
v.0.24.4-p
(This TLS-1.3-only server supports: HelloRetryRequest, KeyUpdate, ECDHE, FFDHE, X25519MLKEM768, SecP256r1MLKEM768, X25519Kyber768, ESNI, etc.)
HelloRetryRequest used to (re)negotiate DH group
First ClientHello, key shares: 0x001D
Second ClientHello, key shares: 0x0017
CRYPTO_CONTEXT
Protocol version: 0x0304
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Key exchange: 0x0017 (Secp256r1)
(Handshake level)
Handshake secrets:
Client: 0xB605759E06E2F4F653D2479310F84BF73103D5E9A2053BB0A80310E9C938B148
Server: 0xFCE706555F5C9F01201747DC42C37B5D2FD8446326C453A18F144CA803A102E2
Handshake keys:
Client write: 0xF98E5D2AB6123ED3C9FBF63AF71AE3825D93EC2EFDF98F024921144CFD6E4204
Server write: 0xC073F364D64B986FD2BBC1F1CB94B5FC29FAB615A800FC27F33DF17A06E6EB7E
Handshake IVs:
Client write (IV): 0x4C49F6A0BD30B6119A23984B
Server write (IV): 0x91F588CB35863C7EE7EE4A56
(Traffic level)
Traffic secrets:
Client: 0xD3F819B3C39BD41AF40D41011B656234F08E5B159E5C067CEC12FD09E8040832
Server: 0x41ADB57F48A01CB5158329A498CDE8D8E191B52BAEDE67B2408C1A71F793EA99
KeyUpdates log, server:
0: 0x57A267E62A3DA725BC7F12D002B6FD44E4CB5B63A12DEE897E771039577F11CB
Traffic keys:
Client write: 0x3662E600ABA9AB4C31BBAA874728FDF3BCCF49F4C2559845BEE3AE97B8178B02
Server write: 0xF5AE0FBF758C0766DD5514555899EF10CB2AF4970FD9048207EE4E91B837EA2F
KeyUpdates log, server:
0: 0x515D9BD65C423B2310F5C2A3BF6F144628CABD67366AC170DEC0406B387A640C
Traffic base IVs:
Client write (base IV): 0x7429AFF993AFAFBC91763B4D
Server write (base IV): 0x7FF1645B3B0FD0B4B82D20F4
KeyUpdates log, server:
0: 0xF22277FBCBB6DB306779BE4C
--- Messages ---
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: CB:D0:35:25:E8:91:2F:E0:AA:27:20:C7:4A:82:A0:59:4F:B5:9A:14:02:5B:DC:8F:B5:89:0D:E2:ED:0D:A7:FA
Client SessionID: A7:70:13:8E:41:9A:BE:0E:CF:19:0A:12:E4:52:1C:9B:F3:4D:1C:78:18:80:68:41:E7:68:59:C8:57:7B:B2:82
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 51 (0x0033); "key_share"
X25519 (0x001D)
x = 0xF00F2BFA5BDBB7CB841066A8A595DFC4BA6026F46A9AD8F942E8921EC19A3457
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
HELLO_RETRY_REQUEST (sent, server)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
HelloRetryRequest (Server Random): CF:21:AD:74:E5:9A:61:11:BE:1D:8C:02:1E:65:B8:91:C2:A2:11:16:7A:BB:8C:5E:07:9E:09:E2:C8:A8:33:9C
SessionID: A7:70:13:8E:41:9A:BE:0E:CF:19:0A:12:E4:52:1C:9B:F3:4D:1C:78:18:80:68:41:E7:68:59:C8:57:7B:B2:82
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
[Legacy ChangeCipherSpec message present (client)]
CLIENT_HELLO (recieved)
Version: 0x0303
Cipher suites:
0x1302,0x1301,0x1303,0xC02C,0xC02B,0xCCA9,0xC030,0xC02F
0xCCA8,0x00FF
Client Random: CB:D0:35:25:E8:91:2F:E0:AA:27:20:C7:4A:82:A0:59:4F:B5:9A:14:02:5B:DC:8F:B5:89:0D:E2:ED:0D:A7:FA
Client SessionID: A7:70:13:8E:41:9A:BE:0E:CF:19:0A:12:E4:52:1C:9B:F3:4D:1C:78:18:80:68:41:E7:68:59:C8:57:7B:B2:82
Extensions:
Type: 11 (0x000B); /non-TLS-1.3/
01:00
Type: 16 (0x0010); "application_layer_protocol_negotiation"
68:32 (HTTP/2/TLS)
68:74:74:70:2F:31:2E:31 (HTTP/1.1)
Type: 45 (0x002D); "psk_key_exchange_modes"
01:01
Type: 44 (0x002C); "cookie"
00:08:0C:00:FE:E1:C0:DE:FA:57
Type: 43 (0x002B); "supported_versions"
0x0304 (TLS 1.3)
0x0303 (TLS 1.2)
Type: 23 (0x0017); /non-TLS-1.3/
Type: 10 (0x000A); "supported_groups"
0x001D (X25519)
0x0017 (Secp256r1)
0x0018 (Secp384r1)
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0xF603F9156F3A5C621E212893462E684B30F7AEEF3F44774DF713FBE1DD6C5B3B
y = 0x5897D583C9E73CAC4022FC7F0BE5B6F55BE4D13EFB2BCE2DA5CE303E6ABF4FEF
Type: 05 (0x0005); "status_request"
01:00:00:00:00
Type: 35 (0x0023); /non-TLS-1.3/
Type: 00 (0x0000); "server_name"
00:00:0E:00:00:0B:74:6C:73:31:33:2E:31:64:2E:70:77
hostname: tls13.1d.pw
Type: 13 (0x000D); "signature_algorithms"
0x0503 (ECDSA_SECP384R1_SHA384)
0x0403 (ECDSA_SECP256R1_SHA256)
0x0807 (ED25519)
0x0806 (RSA_PSS_RSAE_SHA512)
0x0805 (RSA_PSS_RSAE_SHA384)
0x0804 (RSA_PSS_RSAE_SHA256)
0x0601 (RSA_PKCS1_SHA512)
0x0501 (RSA_PKCS1_SHA384)
0x0401 (RSA_PKCS1_SHA256)
SERVER_HELLO (sent)
Legacy Version: 0x0303
Cipher suite: 0x1303 (TLS_CHACHA20_POLY1305_SHA256)
Server Random: DE:AD:DE:AD:DE:AD:C0:DE:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
SessionID: A7:70:13:8E:41:9A:BE:0E:CF:19:0A:12:E4:52:1C:9B:F3:4D:1C:78:18:80:68:41:E7:68:59:C8:57:7B:B2:82
Extensions:
Type: 51 (0x0033); "key_share"
Secp256r1 (0x0017)
x = 0x1FADAC79156E08C8532CE88DF887273141ACE16E44E9C268CE496596F41B65FA
y = 0xF82394637B6ACF004AB253F956BD2CD6CA6C9AD8454BF1FBF281A6C54A93D99C
Type: 43 (0x002B); "supported_versions"
0x0304
[Legacy ChangeCipherSpec message sent (server)]
SERVER_HANDSHAKE_MESSAGES (sent)
Type: 8 (0x08) - "encrypted_extensions"
Length (octets, dec.): 2
00:00
Type: 11 (0x0B) - "certificate"
Length (octets, dec.): 2698
[...] /skipped 2698 data octets/
Type: 15 (0x0F) - "certificate_verify"
Length (octets, dec.): 106
05:03:00:66:30:64:02:30:61:8A:2F:14:9C:8F:E4:CB:D4:A4:4B:B0:B2:91:8B:1B:BD:EB:12:AB:A2:10:B2:E6
8D:20:D5:79:A1:7E:0B:A3:FD:54:D2:6B:A6:E4:42:17:49:98:A8:BF:4D:27:6A:D0:02:30:76:C3:47:46:67:2F
DA:3F:3D:A8:23:D8:1A:80:55:48:13:A4:C6:9F:45:63:04:47:ED:DE:B7:DF:0B:AA:55:08:A2:7A:A7:0D:9E:FD
2F:41:F7:AB:76:84:A1:25:D9:83
Type: 20 (0x14) - "finished"
Length (octets, dec.): 32
74:AD:44:9F:23:E4:FE:F6:77:59:0B:56:7E:BC:7D:B4:C0:43:4A:27:2E:0E:CC:39:2C:99:A6:85:32:69:10:ED
CLIENT_FINISHED (received)
Finished value: 0xAE1DAD77A2857322DD3E094CDE964ADE635A8D2CB3DC3EEEBB0869DEE3FFD6EC
Client Finished status: OK
CLIENT_APPLICATION_DATA (recieved)
ASCII dump (filtered):
GET / HTTP/1.1..accept: */*..user-agent: Mozilla/5.0 AppleWebKit
/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebo
t@anthropic.com)..accept-encoding: gzip, br, zstd, deflate..host
: tls13.1d.pw....
[Server KeyUpdate sent /message skipped/]
TCP: server: 194.87.103.72:443; client: 216.73.216.95:14252; timestamp: 1792628755
Contacts: dxdt.ru, alex/()\/abaabb.xyz.
/\_/\
( 0.0 )
= ^ =
/|_|\
(") (")=~
Provide ESNI to get second ASCII cat
Elapsed server side: 308ms; ServerHello sent: 156ms (including HelloRetryRequest time); TLS connection established: 308ms.