Running-Key Reuse Detector

Locate exact aligned key-stream matching runs, evidence of matches not proof of insecure reuse or recovery of unavailable keys.

Description

Aligned key streams can contain contiguous equal segments.

Aligned key streams can contain contiguous equal segments.1

Matching a submitted segment does not establish undisclosed key reuse or recover protected messages. Use Running-Key Reuse Detector to evaluate the supplied inputs under the specific model below.

When to use Running-Key Reuse Detector

Use Running-Key Reuse Detector to evaluate the supplied inputs under the specific model below. Choose the intended encoding, alphabet or check and keep the exact character, key and measurement conventions described below.

How to use Running-Key Reuse Detector and understand its results

  1. Choose the intended encoding, alphabet or check and keep the exact character, key and measurement conventions described below.
  2. Enter Key stream a, Key stream b, Minimum matching run using the field table and validation rules below, then run the tool.
  3. Read Matching run start indices, Matching run lengths and interpret units, signs, ordering and placeholders as explained below.
  4. If the tool reports an input error, correct that field and rerun. A successful false result, empty match list or unknown-evidence placeholder has the specific meaning described here; check the limitations before applying the result.
Input fieldMeaningValue typeRequirement
keyStreamAKey stream astringRequired; constraints below
keyStreamBKey stream bstringRequired; constraints below
minimumMatchingRunMinimum matching runnumberRequired; constraints below

Enter two equal-length uppercase A–Z streams of at most 4096 characters and an integer minimum run length from 1 to 128. Scan corresponding positions and report maximal equal-symbol runs meeting the minimum, with zero-based starts and lengths. Equal substrings at different offsets are not searched. Empty streams produce empty results and matches alone do not establish key reuse.

runs = maximal positions where streamA[i]==streamB[i], retained when length≥minimum

Field order, units and branch conditions follow the implementation explanation above.

Output fieldMeaningValue type
matchingRunStartIndicesMatching run start indicesarray of number
matchingRunLengthsMatching run lengthsarray of number
json
{
  "input": {
    "keyStreamA": "ABCDEF",
    "keyStreamB": "ZZCDEZ",
    "minimumMatchingRun": 3
  },
  "output": {
    "matchingRunStartIndices": [
      2
    ],
    "matchingRunLengths": [
      3
    ]
  }
}

Limitations and assumptions

Matching a submitted segment does not establish undisclosed key reuse or recover protected messages. Apply the exact scope and assumptions described above.

All listed fields require explicit values. Unexpected fields, incorrect types, nonfinite numbers and sparse arrays fail validation. Domain-specific bounds, alignments and supported tokens are stated above; extremely large inputs or outputs can also be rejected. These errors differ from successful results such as false, no matches or unknown evidence.

Alternative or Complementary methods

Use Pad Byte Monobit Randomness Check for a related task: A monobit statistic compares the counts of zero and one bits.

Use Hex-Dump Entropy Per Block for a related task: Empirical byte entropy summarizes the observed distribution in a block.

References

  1. Running-Key Reuse Detector — tool.io

Similar or alternative tools

Don't forget to set a bookmark for tool.io!
Privacy | Imprint | Cookies