Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
One (Thread) Can Keep a (PRNG) Secret, but not Two
Ehood Porat, Amit Klein, Benny Pinkas
We present a novel, practical attack on the IPv6 Fragment ID generation algorithm of XNU, which is the kernel used by Apple products such as macOS and iOS. This attack exploits a r…
cs.CR2020
Cross Layer Attacks and How to Use Them (for DNS Cache Poisoning, Device Tracking and More)
Amit Klein
We analyze the prandom pseudo random number generator (PRNG) in use in the Linux kernel (which is the kernel of the Linux operating system, as well as of Android) and demonstrate t…
cs.CR2019
From IP ID to Device ID and KASLR Bypass (Extended Version)
Amit Klein, Benny Pinkas
IP headers include a 16-bit ID field. Our work examines the generation of this field in Windows (versions 8 and higher), Linux and Android, and shows that the IP ID field enables r…