ML-for-RNGs

ML-for-RNGs Using Machine Learning to predict RNGs sequences...

CVE-2026-21009-ECDSA-Nonce-Reuse-in-IoT-Firmware-Signing

CVE-2026-21009 – ECDSA Nonce Reuse in IoT Firmware Signing Program Code Python ecdsanoncereusesim.py - Signing firmware with repeated nonce k import ecdsa, hashlib sk = ecdsa.SigningKey.generatecurve=ecdsa.NIST256p vk = sk.getverifyingkey Sign two different firmware images with same nonce due to...

weakrng-sweep

weak-rng sweep CVE-2026-71851 class Research tool: enumerates PRNG schemes x uint32 seeds, derives BIP39 wallets, checks membership against a victim address set defensive research, illbloom-style. Schemes: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift, 11-13 glibc-31 LCG, 14-15 crypto-js 3.3.0...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

You-re-Doing-IoT-RNG

You're Doing IoT RNG This repository contains our results and also the device code used to generate the random numbers across several devices. For a more complete explanation of the vulnerabilities and issues, check out our DEF CON 21 talk here: https://www.youtube.com/watch?v=Zuqw0-jZh9Y Or if y...

CVE-2022-40769

CVE-2022-40769 profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022. authentication| complexity| vector ---|---|--- not available| not...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix blocking and non-blocking rng logic The blocking and non-blocking paths failed to provide valid entropy due to improper buffer management. Reading the buffer starting from byte 1, only 32 bytes of rand...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio: clamp device-reported used.len at copydata randomrecvdone stores the device-reported used.len directly into vi-dataavail. copydata then indexes vi-data using vi-dataidx advanced by previous copydata calls and issue...

CVE-2026-80835

A flaw was found in the Linux kernel's qcom-rng driver. This driver, responsible for generating random numbers, allowed two of its interfaces to operate simultaneously without proper synchronization. This oversight could lead to the generation of predictable or non-random values, potentially...

Ole-K2-Danfoss-Firmware-Disclosure

Ole-K2 Danfoss Firmware Disclosure Researcher: Ole-k2 In...

PT-2026-132402

Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeeded RNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeeded RNG to mark itself seeded without consulting the configured entropy source. On...

CVE-2026-80922

A flaw was found in the Linux kernel's qcom-rng cryptographic driver. This vulnerability incorrectly prevented the generation of zero as a random number. By making the output distinguishable from truly random numbers, this flaw could lead to a reduction in the entropy of the random number...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data The virtio rng device initiates a new entropy request whenever the amount of data available reaches zero. When a new request occurs at the end of a read operation—that is, whe...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: x86/coco: Require seeding RNG with RDRAND on CoCo systems There are few uses of CoCo that do not rely on working cryptography and thus a working RNG. Unfortunately, the CoCo threat model means that the VM host cannot be trusted a...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: hwrng: amd - Fix PCI device refcount leak foreachpcidev is implemented by pcigetdevice. The comment of pcigetdevice states that it increases the reference count for the returned pcidev and also decreases the reference count for t...

litebox-snp-fixed-crng

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · litebox-snp-fixed-crng litebox-snp-fixed-crng Class: Crypto / Predictable RNG Reach: Local guest-vs-host LiteBox v0.1.0 d8556e3 - Microsoft SnpLinuxKernel::fillbytescrng is a process-global FastRng constructed with...

OESA-2026-3902 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-18054 is a vulnerability in QEMU, details are not yet...

SUSE CVE-2026-93159

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

CVE-2026-93159

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

kernel: hwrng: virtio: clamp device-reported used.len at copy_data()

A flaw was found in the Linux kernel's virtio-rng driver. A malicious or buggy virtualized hardware random number generator virtio-rng backend can report an overly large data length to the guest operating system. This unchecked length can lead to an out-of-bounds read, causing the driver to acces...