4 ms·

According to this post it seems like you need 624 consecutive values from mt_rand to recover the seed: https://jazzy.id.au/2010/09/22/cracking_random_number_gen

by rawnlq 12y ago

According to this post it seems like you need 624 consecutive values from mt_rand to recover the seed: https://jazzy.id.au/2010/09/22/cracking_random_number_generators_part_3.html https://jazzy.id.au/2010/09/22/cracking_random_number_genera... (I agreed with everything you said, but it was just hard to follow without understanding how mt rand is usually cracked)

tptacek 12y ago
It's more complicated than that. The poster here isn't "cracking" MT, he's recovering its internal state completely. Partial information gets you to a place where you can run a cracking-like process against a system of constraints, though. In any case: as Stefan Esser points out on Twitter, Wordpress doesn't rely on mt_rand for its password tokens.