4 ms·
Can you crack this PRNG without knowing the seed? f(1) = 1 // seed f(n) = sha512(f(n-1) . f(1))
by imaginenore 9y ago
Can you crack this PRNG without knowing the seed?
f(1) = 1 // seed
f(n) = sha512(f(n-1) . f(1))
- sdevlin 9y agoI guess it depends what you mean by “crack”. Given f(1), which I assume is public, you can predict all future outputs.
- IshKebab 9y agoThat is not what we mean by "crack". Read the article.
- imaginenore 9y agoI said without knowing the seed, so f(1) is not public, only f(n) formula is.
- benchaney 9y agof(1) is the first batch of output.
- mdpopescu 9y agoThis is similar to Yarrow / Fortuna (internal state is a counter, output is the hash of the state) so I'm guessing it's not breakable, at least not trivially.