WOOT '14 - Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools

Attacking the Linux PRNG On Android: Weaknesses in Seeding of Entropic Pools and Low Boot-Time Entropy

David Kaplan, Sagi Kedmi, Roee Hay, and Avi Dayan, IBM Security Systems

Android is the most prevalent Linux-based mobile Operating System in the market today. Many features of the platform security (such as stack protection, key generation, etc.) are based on values provided by the Linux Pseudorandom Number Generator (LPRNG) and weaknesses in the LPRNG could therefore directly affect platform security. Much literature has …

android boot entropy features ibm ibm security ibm security systems linux low market mobile operating system prng security system systems