, the state can be recovered one bit at a time starting from the Least Significant Bit (LSB) [4, 6].
: Once the initial state is recovered, re-run the generator to produce the full keystream and XOR it with the provided ciphertext to reveal the flag [2, 6].
: The state size or the complexity of the mixing function is insufficient to prevent a guess-and-determine attack or a simple breadth-first search on the bit transitions [3, 5]. Solution Strategy (Write-up)
Ti_moe_more
, the state can be recovered one bit at a time starting from the Least Significant Bit (LSB) [4, 6].
: Once the initial state is recovered, re-run the generator to produce the full keystream and XOR it with the provided ciphertext to reveal the flag [2, 6].
: The state size or the complexity of the mixing function is insufficient to prevent a guess-and-determine attack or a simple breadth-first search on the bit transitions [3, 5]. Solution Strategy (Write-up)