Matrix inversion finds S⁻¹ for an invertible matrix S. In LFSR analysis, multiplying S⁻¹ by observed output bits X recovers the tap coefficients A, using XOR and AND as Boolean matrix operations. section 4.2.2
Apply the operation in an observed-bit recovery procedure:
- Reject the candidate when S is non-invertible; otherwise compute A = S⁻¹X and use the recovered taps and state to clone the LFSR. section 4.2.2
Known-plaintext LFSR recovery
XORing ciphertext with the known prefix “ATTACK AT ” yields keystream bits. Trying candidate lengths, the recovery routine inverts each corresponding S; a successful candidate decrypts the remaining ciphertext into a timestamp.

