{"id":"https://openalex.org/W2061893451","doi":"https://doi.org/10.1145/2508859.2516706","title":"Predictability of Android OpenSSL's pseudo random number generator","display_name":"Predictability of Android OpenSSL's pseudo random number generator","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W2061893451","doi":"https://doi.org/10.1145/2508859.2516706","mag":"2061893451"},"language":"en","primary_location":{"id":"doi:10.1145/2508859.2516706","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516706","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102881944","display_name":"Soo Hyeon Kim","orcid":"https://orcid.org/0000-0001-5154-8381"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Soo Hyeon Kim","raw_affiliation_strings":["The Attached Institute of ETRI, Daejeon, South Korea","The Attached Institute of ETRI, Daejeon, South Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]},{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, South Korea#TAB#","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109345259","display_name":"Daewan Han","orcid":null},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Daewan Han","raw_affiliation_strings":["The Attached Institute of ETRI, Daejeon, South Korea","The Attached Institute of ETRI, Daejeon, South Korea#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]},{"raw_affiliation_string":"The Attached Institute of ETRI, Daejeon, South Korea#TAB#","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5115588959","display_name":"Dong Hoon Lee","orcid":"https://orcid.org/0000-0003-1521-133X"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dong Hoon Lee","raw_affiliation_strings":["Korea University, Seoul, South Korea","Korea university - Seoul, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]},{"raw_affiliation_string":"Korea university - Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.7417,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.9526367,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"659","last_page":"668"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7498376965522766},{"id":"https://openalex.org/keywords/pseudorandom-number-generator","display_name":"Pseudorandom number generator","score":0.7071347832679749},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5944737792015076},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5860611200332642},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.5209701657295227},{"id":"https://openalex.org/keywords/software-bug","display_name":"Software bug","score":0.42818063497543335},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.25629302859306335},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.20601797103881836},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.0974510908126831}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7498376965522766},{"id":"https://openalex.org/C140642157","wikidata":"https://www.wikidata.org/wiki/Q1623338","display_name":"Pseudorandom number generator","level":2,"score":0.7071347832679749},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5944737792015076},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5860611200332642},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.5209701657295227},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.42818063497543335},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.25629302859306335},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.20601797103881836},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0974510908126831}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2508859.2516706","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2508859.2516706","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security - CCS '13","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1533182289","https://openalex.org/W1560720671","https://openalex.org/W2077667328","https://openalex.org/W2103370348","https://openalex.org/W2134101189","https://openalex.org/W2145994642","https://openalex.org/W2166093784","https://openalex.org/W2234931939","https://openalex.org/W2396656690","https://openalex.org/W2407063206"],"related_works":["https://openalex.org/W3176564347","https://openalex.org/W3031039437","https://openalex.org/W3204184292","https://openalex.org/W1985458517","https://openalex.org/W2355833770","https://openalex.org/W3101398262","https://openalex.org/W3095877357","https://openalex.org/W10861731","https://openalex.org/W1565885216","https://openalex.org/W4384155409"],"abstract_inverted_index":{"OpenSSL":[0,16,38,50,86,108,142,287],"is":[1,68,118,172,188,246,268,279],"the":[2,10,20,34,37,41,46,49,55,60,65,72,76,83,95,104,113,125,133,137,141,150,156,170,176,179,189,194,206,219,224,250,253,261,266,284,295],"most":[3],"widely":[4],"used":[5],"library":[6],"for":[7,192],"SSL/TLS":[8],"on":[9,19,40,233],"Android":[11,128],"platform.":[12],"The":[13],"security":[14,126,296],"of":[15,22,36,48,59,74,85,98,127,135,140,155,178,212,252,286,297],"depends":[17],"greatly":[18],"unpredictability":[21],"its":[23],"Pseudo":[24],"Random":[25],"Number":[26],"Generator":[27],"(PRNG).":[28],"In":[29,198],"this":[30],"paper,":[31],"we":[32,131,147,159,201,217,242],"reveal":[33],"vulnerability":[35,285],"PRNG":[39,61,87,96,207,263,288],"Android.":[42,298],"We":[43],"first":[44,254],"analyze":[45],"architecture":[47],"specific":[51],"to":[52,71,204,228,248,294],"Android,":[53,75],"and":[54,91,274],"overall":[56],"operation":[57],"process":[58],"from":[62,112],"initialization":[63],"until":[64],"session":[66,256],"key":[67,276],"generated.":[69],"Owing":[70],"nature":[73],"Dalvik":[77],"Virtual":[78],"Machine":[79],"in":[80,167,183,209],"Zygote":[81,99],"initializes":[82],"states":[84,97,139,208],"early":[88],"upon":[89],"booting,":[90],"SSL":[92,255],"applications":[93,105],"copy":[94],"when":[100],"they":[101],"start.":[102],"Therefore,":[103],"that":[106,121,161,216,244,283],"use":[107],"generate":[109],"random":[110],"data":[111],"same":[114],"initial":[115,138],"states,":[116,264],"which":[117],"potential":[119],"problem":[120],"may":[122],"seriously":[123],"affect":[124],"applications.":[129],"Next,":[130],"investigate":[132],"possibility":[134],"recovering":[136],"PRNG.":[143,157],"To":[144],"do":[145],"so,":[146],"should":[148],"predict":[149],"nine":[151],"external":[152],"entropy":[153],"sources":[154,163],"However,":[158],"show":[160,243],"these":[162],"can":[164,289],"be":[165,290],"obtained":[166],"practice":[168],"if":[169,265],"device":[171],"fixed.":[173],"For":[174],"example,":[175],"complexity":[177,191],"attack":[180],"was":[181,230],"O(2^{32+t})":[182],"our":[184,199],"smartphone,":[185],"where":[186],"t":[187],"bit":[190],"estimating":[193],"system":[195],"boot":[196,220],"time.":[197],"experiments,":[200],"were":[202],"able":[203],"restore":[205,229],"74":[210],"out":[211],"100":[213],"cases.":[214],"Assuming":[215],"knew":[218],"time,":[221],"i.e.,":[222],"t=0,":[223],"average":[225],"time":[226],"required":[227],"35":[231],"min":[232],"a":[234,275,291],"PC":[235],"with":[236,257],"four":[237],"cores":[238],"(eight":[239],"threads).":[240],"Finally,":[241],"it":[245],"possible":[247],"recover":[249],"PreMasterSecret":[251],"O(2^{58})":[258],"computations":[259],"using":[260],"restored":[262],"application":[267],"implemented":[269],"by":[270],"utilizing":[271],"org.webkit":[272],"package":[273],"exchange":[277],"scheme":[278],"RSA.":[280],"It":[281],"shows":[282],"real":[292],"threat":[293]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":8},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":5}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}