Attack on Old ANSI Random Number Generator

Almost 20 years ago, I wrote a paper that pointed to a potential flaw in the ANSI X9.17 RNG standard. Now, new research has found that the flaw exists in some implementations of the RNG standard.

Here's the research paper, the website -- complete with cute logo -- for the attack, and Matthew Green's excellent blog post on the research.

from Attack on Old ANSI Random Number Generator