Theoretical cryptanalysis of the Klimov-Shamir number generator TF-1
Boaz Tsaban
Abstract
The internal state of the Klimov-Shamir number generator TF-1 consists of four words of size w bits each, whereas its intended strength is 22w. We exploit an asymmetry in its output function to show that the internal state can be recovered after having 2w outputs, using 21.5w operations. For w=32 the attack is practical, but for their recommended w=64 it is only of theoretical interest.
Create a lesson
Related papers
Decision-Focused Learning for Cyber-Physical Risk-Aware Power Grid Operations
Ayesha Siddiqua Dina, Ebisa D. Wollega, Afzal Hossain Sohag
ToFu: Exploiting and Fuzzing the LLM-Orchestrator-Tool Trust Boundary
Md Nazmul Islam Ananto, Pierre Prevost-Avenel, Colin Smith et al.
APEX-Harm: Evaluating Agent Safety in Shared Professional Workspaces
Ziyi Yang, Adel Bibi, Guohao Li et al.
A Systematic Study of Security Enforcement at Android Inter-Component Boundaries
Sandiyo Christan A
EviRepair: Evidence-Driven Agents for Reliable Vulnerability Repair
Yilian Shi, Qingyu Liu, Tianyi Zhou et al.
Towards Safe World Models: Risks, Defenses, and Evaluation
Xiaoma Wang, Litian Zhang, Xinze Shi et al.