yep, and I'm aware of a data encryption product that was hacked by utilizing exactly the same technique. As dumb as it could be: they promised billions of years

yep, and I'm aware of a data encryption product that was hacked by utilizing exactly the same technique. As dumb as it could be: they promised billions of years an attacker need to decipher data, but were using a dead simple LCG to make a key and a salt. And the salt was stored in a crypto container in open form (b/c it's a salt). :facepalm: Don't implement data encryption on your own, kids...