Black-Box Assessment of Pseudorandom Algorithms

Explore the vulnerabilities of pseudorandom number generators (PRNGs) in this 53-minute Black Hat USA 2013 conference talk. Delve into the flaws of common non-cryptographic PRNGs and learn techniques for identifying PRNGs through black-box analysis of application output. Discover methods for recovering PRNG internal states, enabling the determination of past output and prediction of future output. Gain insights into algorithms that significantly outperform brute-force searches, including constant-time PRNG stream reversal and seeking. Witness live demonstrations of these attacks and receive access to a tool for conducting assessments on pseudorandom algorithms in your own security evaluations.