# The smallest decryptable TLS 1.3 exchange

The smallest decryptable TLS 1.3 exchange (AES-128-GCM): a minimal synthetic handshake, one HTTP/1.1 GET and its response.

- What success looks like: The GET and its 200 response decoded, the body byte for byte.
- What error it exposes: A key-schedule or record-layer bug.
- Kind: synthetic (generated, no real traffic)
- Protocols: HTTP/1.1, TLS 1.3
- Keys: embedded in tls13-minimal.pcapng as a Decryption Secrets Block, and in tls13-minimal.keys.txt as an NSS key log
- Expected decoded output: tls13-minimal.expected.json (JSON), confirmed by an independent decoder before publication
- Regenerate: cargo run -p synthetic-pcap --example tls13_h1_gen -- --variant minimal --suite aes128gcm --name tls13_minimal --out <dir>
- Licence: Creative Commons Attribution 4.0 International (CC BY 4.0), for the released capture and expected-output files only. Attribution: Shorenet Ltd.
- Download all: tls13-minimal.zip holds these files, the licence text (LICENCE.txt) and their SHA-256 (SHA256SUMS)

## Files

- tls13-minimal.pcapng
- tls13-minimal.keys.txt
- tls13-minimal.expected.json
- tls13-minimal.md