Re: Netscape SSL implementation cracked!
-----BEGIN PGP SIGNED MESSAGE-----
Makes one wonder what the seed is on a Windows implementation... If it's only the time, you can probably approximate what the clock is set to within a couple of minutes (if the timezone of the client is known).
Who cares what the timezone of the client is. Try searching around in all 24 timezones. The trick with predicting a random number generator isn't that you have to get the exact key, you just have to narrow the search space to something reasonable. A couple of minutes times 24 isn't that bad! -Jeff -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMF0SvMUtR20Nv5BtAQEAVQP/ccPp8IM8dnGtdDTajjO1a0sYBo7u7LcB yracUhWnE6h90DEtEbGHpEUz3UpvMrXVTC1cFYXml8v3zH4DKlgXyIwC1kItAbqB 9NJTtvB1D5Msnoslqkn+ZoP2K8i0ajcHcXlqma32YiQJM6D4KSxFtRgM7vawCVuy KqnbrdSrQQQ= =bYf5 -----END PGP SIGNATURE-----
participants (1)
-
jis@mit.edu