Faculty of Computer Science and Engineering, Shahid Beheshti University, Tehran, Iran.
10.22042/isecure.2026.241269
Abstract
Deterministic Random Bit Generators (DRBGs) are essential for cryptographic security but remain vulnerable to covert kleptographic attacks that implant backdoors to leak sensitive information. Despite being known for two decades, as demonstrated by incidents such as the Snowden revelations and Dual-EC, these attacks persist in modern protocols, including TLS and post-quantum systems. This paper introduces a novel kleptographic backdoor for hash-based DRBGs, utilising a dual-phase design: secret information is split across two complementary phases, each requiring the other for recovery. This design significantly increases the overall complexity compared with conventional methods. To enhance indistinguishability, we integrate randomness derived from the discrete logarithm problem, ensuring statistical conformity. By leveraging ElGamal encryption to ensure compatibility with our approach, we develop a highly covert backdoor. Rigorous validation via the NIST Statistical Test Suite (STS) and neural network-based anomaly detection confirms the backdoor passes all NIST tests while evading machine learning detection, maintaining statistical integrity and structural consistency.
Jafari,S. and Salarifard,R. (2026). Enhancing Kleptographic Backdoors in Hash-Based Deterministic Random Bit Generators. (e241269). The ISC International Journal of Information Security, (), e241269 doi: 10.22042/isecure.2026.241269
MLA
Jafari,S. , and Salarifard,R. . "Enhancing Kleptographic Backdoors in Hash-Based Deterministic Random Bit Generators" .e241269 , The ISC International Journal of Information Security, , , 2026, e241269. doi: 10.22042/isecure.2026.241269
HARVARD
Jafari S., Salarifard R. (2026). 'Enhancing Kleptographic Backdoors in Hash-Based Deterministic Random Bit Generators', The ISC International Journal of Information Security, (), e241269. doi: 10.22042/isecure.2026.241269
CHICAGO
S. Jafari and R. Salarifard, "Enhancing Kleptographic Backdoors in Hash-Based Deterministic Random Bit Generators," The ISC International Journal of Information Security, (2026): e241269, doi: 10.22042/isecure.2026.241269
VANCOUVER
Jafari S., Salarifard R. Enhancing Kleptographic Backdoors in Hash-Based Deterministic Random Bit Generators. ISC Int. J. Inf. Secur., 2026; (): e241269. doi: 10.22042/isecure.2026.241269
