negativeSYS.SOURCE: V12• 2026-10-28T20:51:44Z
Insecure AES-256 Key Derivation in PDF Implementations
Several PDF implementations, including MuPDF and Foxit, generate AES-256 keys with insufficient entropy, allowing brute-force decryption. The vulnerability arises from predictable random number generators and time-based seeding, compromising document security.
*** END OF TRANSMISSION ***