Re:Hack-petya mission accomplished – Petya ransomware decryptor
by j2kun on Monday April 11, 2016 @07:41PM
(#11476048)
This violates everything I know about hash functions, so it's amazing that it works. Has anyone tried this for industry standard hash functions?
[ Parent
| on HN ]
Re:Hack-petya mission accomplished – Petya ransomware decryptor
by komaromy on Monday April 11, 2016 @08:13PM
(#11476225)
An ideal hash function would have perfect avalanching; that is, changing one bit of the input would result in a 50% chance of each of the output bits being flipped. While modern cryptographic hash functions have at least really good avalanching, definitely enough to resist a genetic search, I'm not sure that it's perfect. Home-brewed crap like what Petya was using is unlikely to be very good at it at all.
Re:Hack-petya mission accomplished – Petya ransomware decryptor
by Houshalter on Tuesday April 12, 2016 @03:45AM
(#11477853)
The first random number generator I learned about was super simple. Middle squares. You take a number, multiply it by itself, and take the middle bits. Because of the way the binary multiplication algorithm works, the bits are pretty thoroughly scrambled and not correlated to the input.
I'm not sure if there aren't clever ways to undo it, but at least it would resist such a simple method like that.
Re:Hack-petya mission accomplished – Petya ransomware decryptor
by j2kun on Tuesday April 12, 2016 @01:41PM
(#11481745)
Sounds like Blum-Blum-Shub https://en.wikipedia.org/wiki/Blum_Blum_Shub