Description
Detect nonces generated using Linear Congruential Generators (LCG).
Background
Some implementations use weak PRNGs like LCG for nonce generation. LCG outputs follow predictable patterns: k_{n+1} = (a * k_n + c) mod m. Once detected, the sequence can be predicted and private keys recovered.
Requirements
Technical Notes
- Requires multiple signatures from same key
- May need lattice techniques for partial state recovery
- Consider common LCG parameters (glibc, MINSTD, etc.)
Description
Detect nonces generated using Linear Congruential Generators (LCG).
Background
Some implementations use weak PRNGs like LCG for nonce generation. LCG outputs follow predictable patterns:
k_{n+1} = (a * k_n + c) mod m. Once detected, the sequence can be predicted and private keys recovered.Requirements
Technical Notes