Say that one uses a known LFG (2 known lags $a$ & $b$, known inner state length $N$, known modulo $m$) to hide some text with a basic à la Vigenère cipher: $C_i=(P_i + {PRNG}_i) \bmod 26$.

Say that the adversary intercepts some ciphered text (not the LFG output), could they use it to perform a correlation attack to get the initial inner state of the LFG? And if so, how much ciphertext would be needed?

  • 1
    $\begingroup$ Hi Peyre and welcome. Please try and format your question to your best abilities (check the edit by clicking edited xxx ago). That will make us take the question more seriously and others to take this site more seriously :) $\endgroup$ – Maarten Bodewes Jun 6 '15 at 14:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.