348 reputation
1411
bio website lucb1e.com
location The Netherlands
age
visits member for 2 years, 6 months
seen Sep 24 '14 at 10:23

Software Engineering student from The Netherlands. Also interested in computer networking and security. See also: lucb1e.com/!about


Jul
14
comment Technical feasibility of decrypting https by replacing the computer's PRNG
Hmm I think I get it. I was thinking "how'd you make it seem random while knowing the output" and an encryption algorithm is the obvious answer. But then how do you know how far into the output stream the PRNG is? Well you don't really need to, deducing that is much faster (just reproduce the output stream and test everything) than cracking true randomness. Use the chip's serial + a static salt as first input, then make the PRNG's state persistent between reboots. That could probably totally work. Waiting for other answers, but I'll accept soon if none are added. Thanks for your answer!
Jul
14
awarded  Announcer
Jul
14
awarded  Student
Jul
14
asked Technical feasibility of decrypting https by replacing the computer's PRNG
Oct
7
comment understanding a length extension attack
Been wanting to ask the same but forgot! Is this by any chance in response to some blogpost unclearly explaining the 7th level of Stripe's CTF challenge?
Aug
26
awarded  Investor
Aug
26
awarded  Supporter
Aug
26
awarded  Organizer
Aug
26
revised Are Stream Ciphers Less Secure?
Added 'block-cipher' tag
Aug
26
suggested approved edit on Are Stream Ciphers Less Secure?