liveBook · Manning

Rng cloning attack

As explained in Hacking Cryptography

An RNG cloning attack reconstructs a stateful random number generator from observed outputs so that its future outputs can be predicted.

An RNG cloning attack reconstructs a stateful pseudorandom number generator from observed outputs, allowing its future outputs to be predicted. Against MT19937, each generated value corresponds to one internal-state value after tempering; reversing that transformation with untemper recovers the state. section 3.1.2

The MT19937 attack proceeds by:

  • Collecting N generated values from the original RNG. section 3.1.2
  • Untempering each value by reversing the XOR, shift, and AND operations used by temper. section 3.1.2

Cloning and verifying MT19937

CloneMT19937 untempers N outputs, initializes a generator with the recovered state, and checks 100 later outputs against the original; the test passes with matching values.

How Hacking Cryptography covers it

How deep it goes
Derives inverse bit operations and implements the complete recovery, but does not discuss broader RNG defenses.
Examples
Uses Go code, MT19937 output samples, bit diagrams, and a 100-output clone-verification test.
What it assumes
Assumes familiarity with MT19937, 32-bit values, XOR, bitwise shifts, and AND operations.
What you can do after
Build it from scratch by implementing untemper, recovering state, constructing a clone, and verifying matching future outputs.
How it connects
Connects pseudorandom number generators, internal state, tempering, untempering, XOR, bitwise shifts, and state recovery.
Cover of Hacking Cryptography
liveBookmanning.com
Read Hacking Cryptography on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Hacking Cryptography. The section links point to the parts of the book it draws on.