After distributing a flock of copies of genp.c, a potential weakness
was pointed out to me.
genp seeds its random number generator with a call to getpid(). This
indicates that there are only 30000 possible seeds on most Unix systems.
(Your system may differ; MAXPID is usually defined in <sys/param.h>)
Therefore, a brute force approach, tailored to genp, may be quite suc-
cessful.
I'm looking at alternative seeds; other genp users should do the same.
My apologies for not catching this one sooner; it was silly of me to
be satisfied with just a "Crack 4.1 test."
--Wes
|
|
