Extracting ephemeral keys for session decryption

[halfdog]

Dear list members,

To decrypt SSH sessions, especially with PFS, the ephemeral keys
would be needed. I want to create a demo to show how this would
be working. I did a search but did not find material good enough
to start working on it immediately.

Are there any documents known, that describe how to proceed? I
do not care about the method: recompiling SSH, ptrace, kernel
module would be all fine to do it.

Without such information already available, where would be the
best position to tap in? For v2 PFS protocols key extraction is
a must, but of course it would be nice if same method could be
applied in general to eliminate the need to know at least server
or client private key. Is there an intersection in the code path
of DH/non-DH and perhaps v1/v2 session key generation?

Would it be sufficient to tap the key once and then follow only
the stream or would SSH go though full key renegotiation after
some while, thus repeated tapping is required?

I think the output of this could be a nice thing to learn from,
also for others. Therefore any help with the key extraction part
would be appreciated.

hd

PS: If demos are not yet available, everyone wanting to participate
in creating a demo is welcome! Intended output is blog post. No
companies, universities, military and no money involved!