You-re-Doing-IoT-RNG

IoT RNG을 잘못하고 있습니다 이 저장소에는 여러 기기에서 난수를 생성하는 데 사용된 기기 코드와 당사의 결과물이 포함되어 있습니다. 취약점과 문제에 대한 보다 완전한 설명은 여기에서 DEF CON 21 발표를 확인하세요: https://www.youtube.com/watch?v=Zuqw0-jZh9Y 또는 원하신다면, 여기에서 이 문제에 대한 모든 내용을 읽을 수 있습니다: https://labs.bishopfox.com/tech-blog/youre-doing-iot-rng 자세한 내용은 개별 기기 폴더의 README를...

keypairvuln

keypair 취약 키 CVE-2021-41117 CVE-2021-41117에 취약한 keypair javascript 라이브러리 버전으로 생성된 키들입니다. 난수 생성기의 버그로 인해 이 라이브러리는 특정 키를 더 높은 확률로 생성합니다. 취약한 버전으로 이 저장소에 있는 키 중 하나를 생성할 확률은 약 70%입니다. t1 t1은 가장 흔한 256개의 키를 포함합니다. 이 키들 중 하나를 생성할 확률은 약 33%입니다. t2 t2는 t1의 키보다 덜 흔하지만 여전히 상대적으로 자주 나타나는 71424개의 키를 포함합니다. 이...

dual-ec-drbg

DualECDRBG 백도어: 교육용 개념 증명 보안 전문가용 | 교육 목적으로만 사용 ⚠️ 면책 조항 이 저장소에는 DualECDRBG 암호화 백도어CVE-2014-8610의 교육용 데모가 포함되어 있습니다. 이는 스노든 폭로 이후 공개된 잘 문서화된 취약점입니다. 이는 교육 목적으로만 제공됩니다: 10년 이상 된 비활성화된 취약점을 시연합니다. 공개적으로 알려진 매개변수와 수학적 관계를 사용합니다. 보안 교육 및 인식 제고를 위한 것입니다. 책임 있는 공개 관행을 따릅니다. 📚 배울 내용 1. 역사적 맥락 : NSA가 어떻게...

php-mt_rand

이 저장소에는 README가 없습니다...

challenge_repo

🎲 Задача энтропии 🇬🇧 Читать на английском | 🇹🇷 Читать на турецком Введение Мы разработали генератор случайных чисел нового поколения, который обрабатывает радиочастотный РЧ шум через собственную архитектуру нейронной сети с последующей пост-обработкой SHA-3. Мы утверждаем, что этот источник...

MGASA-2026-0436 Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Netfilter: Use getrandomu32 instead of prandom. This issue may occur during the update of per-cpu rndstate from the user context, i.e., at the localout path. BUG: Using smpprocessorid in preemptible 00000000 code: nginx/2725...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: hwrng: cavium – fixed the NULL but dereferenced coccicheck error. Fixed the following coccicheck warnings: ./drivers/char/hwrandom/cavium-rng-vf.c:182:17-20: ERROR: pdev is NULL but was dereferenced...

SUSE CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

DEBIAN-CVE-2026-80922

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

EUVD-2026-75099

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-80922 crypto: qcom-rng - Allow zero as a random number

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

Linux Distros Unpatched Vulnerability : CVE-2026-80922

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

PT-2026-89092

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random number Zero is a valid random number and needs to be allowed. Otherwise the output is distinguishable from random...

CVE-2026-62647

Reyrolle 7SR5 (all versions prior to V2.70 ) contains a weak random number generator that is not seeded by a True Random Number Generator (TRNG), producing a predictable sequence of security-relevant values such as session identifiers. An unauthenticated remote attacker could predict these values...

EUVD-2026-71501

In the Linux kernel, the following vulnerability has been resolved: crypto: xilinx-trng - Remove cryptorng interface Implementing the cryptorng interface has no purpose, as it isn't used in practice. It's being removed from other drivers too. Just remove it. This leaves hwrng, which is actually...

CVE-2026-80835

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove cryptorng interface qcom-rng.c exposes the same hardware through two completely separate interfaces, cryptorng and hwrng. However, the implementation of this is buggy because it permits generation...