Уровень 0 · материалов: 4
В кластер входят документы, описывающие технические способы предсказания или взлома генераторов случайных чисел, и не входят тексты об общем устройстве криптографии без привязки к уязвимостям рандомизации.
Общие признаки: предсказуемость PRNG, криптографические недостатки, взлом генераторов случайных чисел, детерминизм последовательностей
Группа выше: Реализация криптографии и её компрометация
Смысл: The text explains the fundamental difference between true random number generators (TRNG) and pseudo-random number generators (PRNG), demonstrating why common PRNGs are insecure for cryptography. It provides mathematical proofs and code examples to show how to predict and 'crack' generators used in Java and PHP.
A technical guide explaining the difference between TRNG and PRNG, with practical demonstrations on how to crack common generators in Java and PHP.
Смысл: The text demonstrates that pseudo-random number generators, specifically Java's Random class, are deterministic. By analyzing the underlying Linear Congruential Generator formula, the author shows how to mathematically calculate or efficiently brute-force a seed to generate a specific, non-random sequence of characters.
The author demonstrates how to reverse-engineer and optimize the search for a Java Random seed to generate a specific, predefined sequence of characters.
Смысл: The text illustrates how a weakness in a pseudo-random number generator (PRNG) can be used as a side-channel to bypass software security restrictions, turning a non-deterministic function into a predictable communication bridge.
A former WoW addon creator bypassed game security restrictions by mathematically reverse-engineering a weak C-based pseudo-random number generator to communicate between protected and unprotected code environments.
Смысл: The text explains the technical implementation and exploitation of a mathematical backdoor in the Dual EC DRBG random number generator, which was used by the NSA for mass surveillance. It demonstrates through Python code how knowing a secret relationship between two points on an elliptic curve allows an attacker to predict future random bits.
A technical guide implementing the flawed Dual EC DRBG algorithm in Python to demonstrate how the NSA used a mathematical backdoor to decrypt internet traffic.