KEYHUNTERS

Debian Security Tracker – CVE-2026-71851: Cryptanalytic Analysis of Entropy Degradation in CryptoJS

Document type:  scientific and technical paper  Subject:  weak pseudorandom number generator (PRNG), BIP39 and deterministic wallet compromise. Annotation CVE-2026-71851 fixes a critical class of cryptographic flaw: substitution of cryptographically strong randomness with an…

Read More

GitHub Security Advisory GHSA-rg76-677x-56q9: “CryptoJS.lib.WordArray.random() uses a weak PRNG (Ill Bloom)”

Scientific and technical article.  Subject: cryptanalytic fact of entropy reduction during BIP39 mnemonic generation. Annotation GHSA-rg76-677x-56q9 (CVE-2026-71851) describes a critical historical vulnerability in [  CryptoJS.lib.WordArray.random()unclear]: in affected versions of CryptoJS, a function…

Read More

PARI/GP Manual: Elliptic Curve Functions and Modular Forms

Henri Cohen, Karim Belabas et al.; Université de Bordeaux; PARI/GP 2.15+. Annotation The PARI/GP elliptic curve subsystem is considered as an environment for precise number-theoretic computations: model initialization, point arithmetic,…

Read More

Magma Computational Algebra System: A Handbook of Elliptic Curves over Finite Fields

Subtitle:  Curve construction, scalar multiplication, and verification of cryptographic parameters in the context of cryptanalysis Abstract.  This article systematizes the capabilities of the  "Elliptic Curves over Finite Fields " chapter  of the Magma handbook:…

Read More

SageMath Reference Manual: Elliptic Curves over General Rings

Author's basis:  The Sage Development Team.  SageMath Mathematical Software System , version 10.x. Annotation This article systematizes the elliptic curve model documented in SageMath over a general commutative ring, its invariants, transformations, point…

Read More

Mining Your Ps and Qs: Discovering Massive Weak Cryptographic Keys in Network Devices

Based on the work of N. Heninger, Z. Durumeric, E. Wustrow, J. A. Halderman,Proceedings of the 21st USENIX Security Symposium, pp. 205–220, 2012.A scientific and analytical review for cryptographers and…

Read More

Trust Wallet Browser Extension: WASM PRNG Vulnerability Postmortem (CVE-2023-31290)

Subject:  Insufficient entropy when generating mnemonic phrases in the Trust Wallet browser extension.Incident period:  November 2022 - April 2023.Researchers:  Trust Wallet Security Team and Ledger Donjon.Classification:  Cryptographic weakness in the pseudo-random number generator, CWE-338…

Read More

Profanity Vanity Address Generator Vulnerability: Cryptanalysis of a Pseudo-Random Generator with a 32-Bit Time Seed

Based on the 1inch Network Security Team technical report (September 2022) and subsequent independent research (Amber Group, Halborn, BlockSec, cryptosec.com)Research and Analysis Review Abstract:  This paper examines a cryptanalytic vulnerability in…

Read More

Milk Sad: CVE-2023-39910 – Vulnerability Disclosure and Technical Analysis

Milk Sad Research Team / official analytical resource milksad.infoAugust 2023 · Scientific and analytical article Abstract: This article  examines CVE-2023-39910 ("Milk Sad"), a critical entropy generation flaw in Libbitcoin Explorer (bx)…

Read More

The Generalized Birthday Problem and Its Applications in Cryptanalysis

Based on:  David Wagner,  A Generalized Birthday Problem , CRYPTO 2002, LNCS 2442, pp. 288–304. DOI: 10.1007/3-540-45708-9_19 Scientific analytical article Annotation David Wagner's work formalized the generalized birthday problem: from  k  independent lists of n-bit…

Read More