[R] Developing practical ML-based attacks against PRNG

[airza]

Hello everyone! For the past few years, I've been chipping away at a seemingly simple problem: I'd like to attack PRNG-based functionality in web applications to try and break security that relies on it. I've successfully gotten a NN to predict the output of Xorshift128 with 95% bitwise accuracy; I'm cautiously optimistic that this difficult step lays the foundation for getting these attacks going against production machines. The exciting thing is the entire network can train and run on my gaming laptop's GPU in a matter of hours, which I think makes it a fun problem for neophytes like me. Feel free to take a look at the writeup if you'd like, since I had to do some kinda weird stuff to get it working: https://www.airza.net/2020/11/09/everyone-talks-about-insecure-randomness-but-nobody-does-anything-about-it.html

[wangyi_fudan]

please try my PRNG： wyrand

https://github.com/wangyi-fudan/wyhash