Lauschangriff

Hack.lu 2026

Task: decrypt a captured TLS 1.3 session (X25519MLKEM768) between an admin bot and a Go server whose patched kernel uses a 96-bit shared PRNG. Solution: recover the PRNG state from ServerHello.random with z3, predict the X25519 private key and ML-KEM seed, shortcut the ML-KEM shared secret via SHA3, then run the full TLS 1.3 key schedule to read the flag.