def generate_random_mt_output():
twister = MersenneTwister()
random_waiter()
seed = int(time.time())
twister.seed_mt(seed)
random_waiter()
return twister.extract_number(), seed
def generate_password_reset_token():
mt = MersenneTwister()
seed = int(time.time()) & ((1 << 16) - 1)
print("seed: ", seed)
mt.seed_mt(seed)
token = bytearray()
for _ in range(16):
cur_rn = mt.extract_number()
for _ in range(4):
token.append(cur_rn & ((2**8) - 1))
cur_rn = cur_rn >> 8
return token
def crack_mt_seed(output):
output_received_time = math.floor(time.time())
seed_time_lower_bound = output_received_time - 2000 - 1
seed_time_upper_bound = output_received_time - 40 + 1
print("Seed Time Upper Bound: {} Seed Time Lower Bound: {}".format(
seed_time_upper_bound, seed_time_lower_bound))
for i in range(seed_time_lower_bound, seed_time_upper_bound):
mt = MersenneTwister()
mt.seed_mt(i)
if mt.extract_number() == output:
return i
raise Exception("Matching seed not found!")
def mersenne_stream_cipher(seed, input_bytearr):
mt = MersenneTwister()
mt.seed_mt(seed)
output_bytearr = bytearray()
idx = 0
while idx < len(input_bytearr):
cur_rn = mt.extract_number()
for _ in range(4):
output_bytearr.append(input_bytearr[idx] ^ (cur_rn & (2**8 - 1)))
cur_rn = cur_rn >> 8
idx += 1
if idx >= len(input_bytearr):
break
return output_bytearr
def crack_mt_cipher(ciphertext, known_plaintext):
known_len = len(known_plaintext_bytearr)
prefix_len = len(ciphertext) - known_len
known_ciphertext_start = prefix_len + (-prefix_len % 4)
known_plaintext_start = 4 - (prefix_len % 4)
keystream_byte = 0
for i in range(4):
known_ciphertext_byte = ciphertext[known_ciphertext_start + i]
known_plaintext_byte = known_plaintext[known_plaintext_start + i]
keystream_byte += (known_ciphertext_byte ^ known_plaintext_byte) << (i * 8)
mt_output_num = int(known_ciphertext_start / 4)
for i in range(2**16):
mt = MersenneTwister()
mt.seed_mt(i)
for _ in range(mt_output_num):
mt.extract_number()
if mt.extract_number() == keystream_byte:
return i
raise Exception("Failed to find seed with matching output")
def check_password_reset_token(ciphertext):
now_16bit = int(time.time()) & ((2 ** 16) - 1)
for seed in range(now_16bit - 2, now_16bit + 1):
mt = MersenneTwister()
mt.seed_mt(seed)
cur_ciphertext_idx = 0
while cur_ciphertext_idx < len(ciphertext):
cur_rn = mt.extract_number()
possible_password_reset_token = True
for _ in range(4):
cur_rn_byte = cur_rn & ((2**8) - 1)
cur_rn = cur_rn >> 8
if cur_rn_byte != ciphertext[cur_ciphertext_idx]:
possible_password_reset_token = False
break
elif cur_ciphertext_idx == 15:
return True
else:
cur_ciphertext_idx+= 1
if not possible_password_reset_token:
break
return False
def total_mt_tap(seed):
mt = MersenneTwister()
mt.seed_mt(seed)
return [mt.extract_number() for _ in range(624)]