Reputation
350
Top tag
Next privilege 500 Rep.
Cast close & reopen votes
Badges
1 4 12
Newest
 Editor
Impact
~30k people reached

Jul
14
awarded  Nice Question
Jul
14
awarded  Notable Question
Jul
14
awarded  Popular Question
Jul
14
comment Technical feasibility of decrypting https by replacing the computer's PRNG
Hmm I think I get it. I was thinking "how'd you make it seem random while knowing the output" and an encryption algorithm is the obvious answer. But then how do you know how far into the output stream the PRNG is? Well you don't really need to, deducing that is much faster (just reproduce the output stream and test everything) than cracking true randomness. Use the chip's serial + a static salt as first input, then make the PRNG's state persistent between reboots. That could probably totally work. Waiting for other answers, but I'll accept soon if none are added. Thanks for your answer!
Jul
14
awarded  Announcer
Jul
14
awarded  Student
Jul
14
asked Technical feasibility of decrypting https by replacing the computer's PRNG
Oct
7
comment understanding a length extension attack
Been wanting to ask the same but forgot! Is this by any chance in response to some blogpost unclearly explaining the 7th level of Stripe's CTF challenge?
Aug
26
awarded  Investor
Aug
26
awarded  Supporter
Aug
26
awarded  Organizer
Aug
26
revised Are Stream Ciphers Less Secure?
Added 'block-cipher' tag
Aug
26
suggested approved edit on Are Stream Ciphers Less Secure?