17 Dec
2003
17 Dec
'03
11:17 p.m.
Scott Brickner writes:
If NetScape uses such a PRNG to select 40bit keys for SSL, then the work to be done in brute-force search going on right now might be *significantly* reduced by knowing the planes on which the numbers lie. If the constants are particularly poor, there might be as little as ten or twelve bits of real key.
So who here knows 80x86 assembler, is handy with a debugger, and has a few hours of spare time to figure out the PRNG? andrew