Security News > 2021 > April > Backdoor Found in Codecov Bash Uploader

Backdoor Found in Codecov Bash Uploader
2021-04-21 16:12

'To observe the outputs of the two black boxes for a finite time and make a pronouncment of if the boxes contain a random generator or a determanistic generator.

2, The first is not, the second is.3, The first is, the second is not.4, Both are random.

A, A 'True' Random GeneratorB, A 'psuedo' Random Generator using a determanistic generator and a determanistic masking process that is an analog of a TRNG output.

"A one-way function f can be utilized to generate pseudorandom bit sequences by first selecting a random seed s, and then applying the function to the sequence of values s, s+1, s+2,; the output sequence is f(s), f(s+1), f(s+2),."

"A Markov process is a random process whose future probabilities are determined by its most recent values."

Such a lookup table can be devolved into two or more sequential used lookup tables, the first being a table generated by the use of a random oracle to give a random but fully determanistic uniform probability.


News URL

https://www.schneier.com/blog/archives/2021/04/backdoor-found-in-codecov-bash-uploader.html