{"id":"https://openalex.org/W7163167007","doi":"https://doi.org/10.48550/arxiv.2606.00918","title":"One (Thread) Can Keep a (PRNG) Secret, but not Two","display_name":"One (Thread) Can Keep a (PRNG) Secret, but not Two","publication_year":2026,"publication_date":"2026-05-30","ids":{"openalex":"https://openalex.org/W7163167007","doi":"https://doi.org/10.48550/arxiv.2606.00918"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.00918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.00918","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050476887","display_name":"Ehood Porat","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Porat, Ehood","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017088429","display_name":"Amit Klein","orcid":"https://orcid.org/0000-0002-8024-8756"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Klein, Amit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5089439033","display_name":"Benny Pinkas","orcid":"https://orcid.org/0000-0002-9053-3024"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pinkas, Benny","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.32839998602867126,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.32839998602867126,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.1388999968767166,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.0966000035405159,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fragment","display_name":"Fragment (logic)","score":0.6891999840736389},{"id":"https://openalex.org/keywords/arp-spoofing","display_name":"ARP spoofing","score":0.5044000148773193},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4794999957084656},{"id":"https://openalex.org/keywords/datagram","display_name":"Datagram","score":0.47749999165534973},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4668000042438507},{"id":"https://openalex.org/keywords/identifier","display_name":"Identifier","score":0.4496000111103058},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.3901999890804291},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.32989999651908875},{"id":"https://openalex.org/keywords/network-address","display_name":"Network address","score":0.32499998807907104}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7067000269889832},{"id":"https://openalex.org/C2776235265","wikidata":"https://www.wikidata.org/wiki/Q18392052","display_name":"Fragment (logic)","level":2,"score":0.6891999840736389},{"id":"https://openalex.org/C86255107","wikidata":"https://www.wikidata.org/wiki/Q296847","display_name":"ARP spoofing","level":5,"score":0.5044000148773193},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49869999289512634},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4794999957084656},{"id":"https://openalex.org/C152298349","wikidata":"https://www.wikidata.org/wiki/Q726868","display_name":"Datagram","level":3,"score":0.47749999165534973},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4668000042438507},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.4496000111103058},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44530001282691956},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.3901999890804291},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.32989999651908875},{"id":"https://openalex.org/C2776599810","wikidata":"https://www.wikidata.org/wiki/Q4418000","display_name":"Network address","level":2,"score":0.32499998807907104},{"id":"https://openalex.org/C8797682","wikidata":"https://www.wikidata.org/wiki/Q2115","display_name":"XML","level":2,"score":0.3222000002861023},{"id":"https://openalex.org/C84555802","wikidata":"https://www.wikidata.org/wiki/Q2551624","display_name":"IPv6","level":3,"score":0.32010000944137573},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.2791999876499176},{"id":"https://openalex.org/C196491621","wikidata":"https://www.wikidata.org/wiki/Q554830","display_name":"Man-in-the-middle attack","level":3,"score":0.27720001339912415},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C147873670","wikidata":"https://www.wikidata.org/wiki/Q11182","display_name":"Network address translation","level":4,"score":0.26759999990463257},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.26579999923706055},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.26570001244544983},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.26510000228881836},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.25839999318122864}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.00918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.00918","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.00918","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4864940941333771,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,96],"present":[1],"a":[2,31,98,111],"novel,":[3],"practical":[4],"attack":[5,29,75,102,119],"on":[6,79,103,120],"the":[7,17,35,45,49,72,135,146],"IPv6":[8,61],"Fragment":[9],"ID":[10],"generation":[11],"algorithm":[12],"of":[13,48,101],"XNU,":[14],"which":[15],"is":[16,71,77,86,115],"kernel":[18],"used":[19],"by":[20],"Apple":[21,131],"products":[22,144],"such":[23],"as":[24,67,113],"macOS":[25],"and":[26,51,93,117,139],"iOS.":[27],"This":[28],"exploits":[30],"race-condition":[32],"vulnerability":[33,134],"in":[34,57],"algorithm's":[36],"pseudorandom":[37],"number":[38],"generator":[39],"(PRNG)":[40],"to":[41,88],"cryptanalytically":[42],"break,":[43],"learn":[44],"internal":[46],"state":[47],"generator,":[50],"consequently":[52],"predict":[53],"fragment":[54,62,83],"IDs,":[55],"which,":[56],"turn,":[58],"facilitates":[59],"an":[60,107,118,124,128],"spoofing":[63],"attack.":[64,147],"As":[65],"far":[66],"we":[68],"know,":[69],"this":[70,133],"first":[73],"cryptanalytic":[74],"that":[76],"based":[78],"exploiting":[80],"race-conditions.":[81],"With":[82],"spoofing,":[84],"it":[85,114],"possible":[87],"partially":[89],"manipulate":[90],"UDP":[91],"datagrams":[92],"TCP":[94],"segments.":[95],"showcase":[97],"new":[99],"type":[100],"NFS":[104],"(UDP)":[105],"where":[106,123],"off-path":[108,125],"attacker":[109,126],"modifies":[110,127],"file":[112],"written,":[116],"HTTP":[121,129],"(TCP)":[122],"request.":[130],"assigned":[132],"CVE":[136],"identifier":[137],"CVE-2024-27823":[138],"patched":[140],"all":[141],"its":[142],"XNU-based":[143],"against":[145]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-03T00:00:00"}