Mifare Plus Atack

AT91SAM · 2015-11-30 04:42:44

Changed all uint16_t to uint32_t and it looks better IMO did the same block twice had slittely diffrent result but it looks oke ... also found that some blocks take very mutch longer longer to get a propper nouce then others.....
Iam testing the why and see if a can discover a possible pattern.
hardnested keep saying.

Acquired 110096 nonces (53548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
But after 10 minutes of repeating 0% it starts finding valid nounces and will come with a result.
while a other block on the same card can give normal expected speed result.

[== Undefined ==]

proxmark3> hf mf hardnested 0 A 000000000000 255 B s w 
--target block no:255, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin          
Acquired  1456 nonces ( 1446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1555 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1992 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2542 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3501 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5382 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired  6048 nonces ( 5786 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired  6608 nonces ( 6300 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired  7056 nonces ( 6704 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired  7504 nonces ( 7104 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired  8064 nonces ( 7603 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired  8512 nonces ( 7995 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired  9072 nonces ( 8478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired  9520 nonces ( 8877 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 10080 nonces ( 9343 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 10528 nonces ( 9725 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 11088 nonces (10201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 11536 nonces (10565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 12096 nonces (11032 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 12544 nonces (11411 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 13104 nonces (11865 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 13552 nonces (12241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 14112 nonces (12692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 14560 nonces (13042 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 15008 nonces (13405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 15568 nonces (13850 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 16016 nonces (14200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 16576 nonces (14658 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 17024 nonces (14998 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 17584 nonces (15425 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 18032 nonces (15791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 18592 nonces (16217 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 19040 nonces (16563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 19600 nonces (16971 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 20048 nonces (17305 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 20608 nonces (17716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 21056 nonces (18040 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 21504 nonces (18371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 22064 nonces (18762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 22512 nonces (19081 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 23072 nonces (19468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 23520 nonces (19795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 24080 nonces (20203 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 24528 nonces (20503 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 25088 nonces (20875 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 25536 nonces (21171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 26096 nonces (21540 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 26544 nonces (21839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 27104 nonces (22220 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 27552 nonces (22520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 28112 nonces (22886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 28560 nonces (23172 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 29008 nonces (23449 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 29568 nonces (23807 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 30016 nonces (24092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 30576 nonces (24459 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 31024 nonces (24750 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 31584 nonces (25088 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 32032 nonces (25364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 32592 nonces (25714 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 33040 nonces (25988 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 33600 nonces (26330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 34048 nonces (26591 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 34608 nonces (26914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 35056 nonces (27173 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 35504 nonces (27447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 36064 nonces (27776 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 36512 nonces (28048 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 37072 nonces (28389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 37520 nonces (28656 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 38080 nonces (28994 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 38528 nonces (29250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 39088 nonces (29544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 39536 nonces (29786 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 40096 nonces (30094 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 40544 nonces (30332 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 41104 nonces (30628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 41552 nonces (30861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 42112 nonces (31148 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 42560 nonces (31374 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 43008 nonces (31613 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 43568 nonces (31887 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 44016 nonces (32108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 44576 nonces (32391 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 45024 nonces (32619 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 45584 nonces (32885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 46032 nonces (33099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 46592 nonces (33375 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 47040 nonces (33581 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 47600 nonces (33872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 48048 nonces (34081 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 48608 nonces (34345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 49056 nonces (34562 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 49504 nonces (34783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 50064 nonces (35038 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 50512 nonces (35251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 51072 nonces (35517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 51520 nonces (35729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 52080 nonces (35972 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 52528 nonces (36175 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 53088 nonces (36439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 53536 nonces (36636 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 54096 nonces (36874 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 54544 nonces (37054 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 55104 nonces (37295 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 55552 nonces (37498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 56112 nonces (37729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 56560 nonces (37922 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 57008 nonces (38117 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 57568 nonces (38342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 58016 nonces (38526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 58576 nonces (38751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 59024 nonces (38930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 59584 nonces (39151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 60032 nonces (39321 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired a total of 60480 nonces in 93,7 seconds (38736 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x2c:
Sum(a8) = 0
odd_state =  0xfffffb
even_state = 0xfffff6
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x2c:
Sum(a8) = 96
odd_state =  0x3bb330
even_state = 0x8084ce

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]: e [ 12]: e [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]: e [ 18]:   [ 19]: e [ 20]: e [ 21]:   [ 22]: e [ 23]:   
[ 24]:   [ 25]: e [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]: e [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]: e [ 44]: e [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]: e [ 50]:   [ 51]: e [ 52]: e [ 53]:   [ 54]: e [ 55]:   
[ 56]:   [ 57]: e [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]: e [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]: e [ 76]: e [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]: e [ 82]:   [ 83]: e [ 84]: e [ 85]:   [ 86]: e [ 87]:   
[ 88]:   [ 89]: e [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]: e [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]: e [108]: e [109]:   [110]:   [111]:   
[112]:   [113]: e [114]:   [115]: e [116]: e [117]:   [118]: e [119]:   
[120]:   [121]: e [122]:   [123]:   [124]:   [125]:   [126]: e [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]: e [140]: e [141]:   [142]:   [143]:   
[144]:   [145]: e [146]:   [147]: e [148]: e [149]:   [150]: e [151]:   
[152]:   [153]: e [154]:   [155]:   [156]:   [157]:   [158]: e [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]: e [172]: e [173]:   [174]:   [175]:   
[176]:   [177]: e [178]:   [179]: e [180]: e [181]:   [182]: e [183]:   
[184]:   [185]: e [186]:   [187]:   [188]:   [189]:   [190]: e [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]: e [204]: e [205]:   [206]:   [207]:   
[208]:   [209]: e [210]:   [211]: e [212]: e [213]:   [214]: e [215]:   
[216]:   [217]: e [218]:   [219]:   [220]:   [221]:   [222]: e [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]: e [236]: e [237]:   [238]:   [239]:   
[240]:   [241]: e [242]:   [243]: e [244]: e [245]:   [246]: e [247]:   
[248]:   [249]: e [250]:   [251]:   [252]:   [253]:   [254]: e [255]:   

Tests: Best 40 first bytes:
Byte: 2c, n = 167, k = 19, Sum(a8):  32, Confidence: 100,0%
Byte: fb, n = 161, k = 161, Sum(a8): 256, Confidence: 100,0%
Byte: e4, n = 148, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: e3, n = 145, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: db, n = 156, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: bc, n = 164, k = 164, Sum(a8): 256, Confidence: 100,0%
Byte: 9c, n = 163, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 94, n = 154, k = 143, Sum(a8): 224, Confidence: 100,0%
Byte: 84, n = 156, k = 156, Sum(a8): 256, Confidence: 100,0%
Byte: 83, n = 145, k = 145, Sum(a8): 256, Confidence: 100,0%
Byte: 63, n = 168, k = 168, Sum(a8): 256, Confidence: 100,0%
Byte: 5b, n = 150, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 49, n = 155, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 41, n = 152, k = 152, Sum(a8): 256, Confidence: 100,0%
Byte: 3c, n = 160, k = 160, Sum(a8): 256, Confidence: 100,0%
Byte: 2e, n = 161, k = 161, Sum(a8): 256, Confidence: 100,0%
Byte: 26, n = 163, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 04, n = 150, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 14, n = 152, k = 16, Sum(a8):  32, Confidence: 100,0%
Byte: 0c, n = 160, k = 142, Sum(a8): 224, Confidence: 100,0%
Byte: be, n = 158, k = 18, Sum(a8):  32, Confidence: 100,0%
Byte: b6, n = 157, k = 138, Sum(a8): 224, Confidence: 100,0%
Byte: 74, n = 158, k = 136, Sum(a8): 224, Confidence: 100,0%
Byte: ac, n = 144, k = 22, Sum(a8):  32, Confidence: 99,5%
Byte: 7c, n = 157, k = 39, Sum(a8):  64, Confidence: 99,0%
Byte: 44, n = 156, k = 117, Sum(a8): 192, Confidence: 99,0%
Byte: a6, n = 157, k = 40, Sum(a8):  64, Confidence: 99,0%
Byte: a4, n = 154, k = 115, Sum(a8): 192, Confidence: 98,9%
Byte: 61, n = 156, k = 40, Sum(a8):  64, Confidence: 98,9%
Byte: 69, n = 157, k = 38, Sum(a8):  64, Confidence: 98,8%
Byte: 06, n = 158, k = 117, Sum(a8): 192, Confidence: 98,7%
Byte: 9b, n = 147, k = 37, Sum(a8):  64, Confidence: 98,7%
Byte: 36, n = 147, k = 110, Sum(a8): 192, Confidence: 98,7%
Byte: c9, n = 159, k = 121, Sum(a8): 192, Confidence: 98,6%
Byte: d3, n = 151, k = 112, Sum(a8): 192, Confidence: 98,5%
Byte: 01, n = 155, k = 119, Sum(a8): 192, Confidence: 97,9%
Byte: 1b, n = 161, k = 43, Sum(a8):  64, Confidence: 97,6%
Byte: 33, n = 145, k = 107, Sum(a8): 192, Confidence: 97,6%
Byte: ae, n = 161, k = 37, Sum(a8):  64, Confidence: 97,4%
Byte: 6b, n = 161, k = 37, Sum(a8):  64, Confidence: 97,4%
          
Sum(a0) = 104          
Number of first bytes with confidence > 99,0%: 26          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 104: 3352365623296 (2^41,6)
Reducing Partial Statelists (p,q) = (2,6) with lengths 17606, 178706
Odd state candidates: 7911 (2^12,9)
Even state candidates: 3792 (2^11,9)
Odd state candidates: 0 (2^-inf)
Even state candidates: 79062 (2^16,3)
Odd state candidates: 0 (2^-inf)
Even state candidates: 79034 (2^16,3)
Odd state candidates: 7528 (2^12,9)
Even state candidates: 4126 (2^12,0)
Reducing Partial Statelists (p,q) = (6,2) with lengths 182032, 17866
Odd state candidates: 40415 (2^15,3)
Even state candidates: 0 (2^-inf)
Odd state candidates: 0 (2^-inf)
Even state candidates: 9344 (2^13,2)
Odd state candidates: 0 (2^-inf)
Even state candidates: 9620 (2^13,2)
Odd state candidates: 39053 (2^15,3)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (10,14) with lengths 181736, 18126
Odd state candidates: 41205 (2^15,3)
Even state candidates: 0 (2^-inf)
Odd state candidates: 0 (2^-inf)
Even state candidates: 10326 (2^13,3)
Odd state candidates: 0 (2^-inf)
Even state candidates: 10090 (2^13,3)
Odd state candidates: 38839 (2^15,2)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (14,10) with lengths 18386, 185062
Odd state candidates: 8437 (2^13,0)
Even state candidates: 3780 (2^11,9)
Odd state candidates: 0 (2^-inf)
Even state candidates: 81422 (2^16,3)
Odd state candidates: 0 (2^-inf)
Even state candidates: 81098 (2^16,3)
Odd state candidates: 7872 (2^12,9)
Even state candidates: 4320 (2^12,1)
Number of remaining possible keys: 126957940 (2^26,9)
Tests: searching for key ffffffffffff after first byte 0x2c (state_odd = 0xfffffb, state_even = 0xfffff6) ...
||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x2c (state_odd = 0x3bb330, state_even = 0x8084ce) ...
||||||||||||||||
Brute force phase not yet implemented          
proxmark3> hf mf hardnested 0 A 000000000000 255 B s w
--target block no:255, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...

Writing acquired nonces to binary file nonces.bin          
Acquired  1792 nonces ( 1771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2956 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3484 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3913 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4850 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  6048 nonces ( 5775 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired  6608 nonces ( 6290 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired  7056 nonces ( 6689 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired  7504 nonces ( 7092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired  8064 nonces ( 7582 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired  8512 nonces ( 7983 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired  9072 nonces ( 8468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired  9520 nonces ( 8868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 10080 nonces ( 9349 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 10528 nonces ( 9727 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 11088 nonces (10201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 11536 nonces (10565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 12096 nonces (11033 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 12544 nonces (11392 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 13104 nonces (11854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 13552 nonces (12223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 14112 nonces (12693 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 14560 nonces (13053 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 15008 nonces (13407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 15568 nonces (13838 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 16016 nonces (14177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 16576 nonces (14626 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 17024 nonces (14979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 17584 nonces (15415 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 18032 nonces (15758 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 18592 nonces (16168 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 19040 nonces (16511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 19600 nonces (16935 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 20048 nonces (17263 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 20608 nonces (17648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 21056 nonces (17986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 21504 nonces (18323 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 22064 nonces (18730 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 22512 nonces (19055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 23072 nonces (19453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 23520 nonces (19768 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 24080 nonces (20163 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 24528 nonces (20476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 25088 nonces (20872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 25536 nonces (21190 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 26096 nonces (21561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 26544 nonces (21872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 27104 nonces (22258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 27552 nonces (22557 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 28112 nonces (22934 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 28560 nonces (23213 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 29008 nonces (23483 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 29568 nonces (23858 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 30016 nonces (24155 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 30576 nonces (24511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 31024 nonces (24802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 31584 nonces (25145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 32032 nonces (25423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 32592 nonces (25771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 33040 nonces (26031 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 33600 nonces (26375 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 34048 nonces (26638 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 34608 nonces (26973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 35056 nonces (27221 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 35504 nonces (27494 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 36064 nonces (27802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 36512 nonces (28050 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 37072 nonces (28362 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 37520 nonces (28612 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 38080 nonces (28937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 38528 nonces (29183 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 39088 nonces (29511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 39536 nonces (29759 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 40096 nonces (30059 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 40544 nonces (30289 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 41104 nonces (30580 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 41552 nonces (30807 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 42112 nonces (31087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 42560 nonces (31317 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 43008 nonces (31531 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 43568 nonces (31823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 44016 nonces (32065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 44576 nonces (32342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 45024 nonces (32570 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 45584 nonces (32854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 46032 nonces (33080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 46592 nonces (33350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 47040 nonces (33582 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 47600 nonces (33849 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 48048 nonces (34065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 48608 nonces (34329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 49056 nonces (34546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 49504 nonces (34772 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 50064 nonces (35042 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 50512 nonces (35241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 51072 nonces (35519 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 51520 nonces (35722 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 52080 nonces (35991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 52528 nonces (36189 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 53088 nonces (36446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 53536 nonces (36648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 53536 nonces in 85,0 seconds (37791 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x74:
Sum(a8) = 256
odd_state =  0xffffff
even_state = 0xfffff5
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x74:
Sum(a8) = 136
odd_state =  0x3bb334
even_state = 0x8084cd

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]: e [ 12]: e [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]: e [ 18]:   [ 19]: e [ 20]: e [ 21]:   [ 22]: e [ 23]:   
[ 24]:   [ 25]: e [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]: e [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]: e [ 44]: e [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]: e [ 50]:   [ 51]: e [ 52]: e [ 53]:   [ 54]: e [ 55]:   
[ 56]:   [ 57]: e [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]: e [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]: e [ 76]: e [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]: e [ 82]:   [ 83]: e [ 84]: e [ 85]:   [ 86]: e [ 87]:   
[ 88]:   [ 89]: e [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]: e [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]: e [108]: e [109]:   [110]:   [111]:   
[112]:   [113]: e [114]:   [115]: e [116]: e [117]:   [118]: e [119]:   
[120]:   [121]: e [122]:   [123]:   [124]:   [125]:   [126]: e [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]: e [140]: e [141]:   [142]:   [143]:   
[144]:   [145]: e [146]:   [147]: e [148]: e [149]:   [150]: e [151]:   
[152]:   [153]: e [154]:   [155]:   [156]:   [157]:   [158]: e [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]: e [172]: e [173]:   [174]:   [175]:   
[176]:   [177]: e [178]:   [179]: e [180]: e [181]:   [182]: e [183]:   
[184]:   [185]: e [186]:   [187]:   [188]:   [189]:   [190]: e [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]: e [204]: e [205]:   [206]:   [207]:   
[208]:   [209]: e [210]:   [211]: e [212]: e [213]:   [214]: e [215]:   
[216]:   [217]: e [218]:   [219]:   [220]:   [221]:   [222]: e [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]: e [236]: e [237]:   [238]:   [239]:   
[240]:   [241]: e [242]:   [243]: e [244]: e [245]:   [246]: e [247]:   
[248]:   [249]: e [250]:   [251]:   [252]:   [253]:   [254]: e [255]:   

Tests: Best 40 first bytes:
Byte: 74, n = 151, k = 134, Sum(a8): 224, Confidence: 100,0%
Byte: fb, n = 141, k = 141, Sum(a8): 256, Confidence: 100,0%
Byte: e4, n = 142, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: e3, n = 125, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: db, n = 143, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: bc, n = 134, k = 134, Sum(a8): 256, Confidence: 100,0%
Byte: 9c, n = 151, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 84, n = 138, k = 138, Sum(a8): 256, Confidence: 100,0%
Byte: 83, n = 137, k = 137, Sum(a8): 256, Confidence: 100,0%
Byte: 63, n = 140, k = 140, Sum(a8): 256, Confidence: 100,0%
Byte: 5b, n = 141, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 49, n = 141, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 41, n = 146, k = 146, Sum(a8): 256, Confidence: 100,0%
Byte: 3c, n = 137, k = 137, Sum(a8): 256, Confidence: 100,0%
Byte: 2e, n = 142, k = 142, Sum(a8): 256, Confidence: 100,0%
Byte: 26, n = 145, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 04, n = 143, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 2c, n = 148, k = 17, Sum(a8):  32, Confidence: 100,0%
Byte: be, n = 146, k = 17, Sum(a8):  32, Confidence: 100,0%
Byte: 94, n = 145, k = 128, Sum(a8): 224, Confidence: 100,0%
Byte: 0c, n = 139, k = 122, Sum(a8): 224, Confidence: 100,0%
Byte: ac, n = 138, k = 18, Sum(a8):  32, Confidence: 100,0%
Byte: b6, n = 136, k = 117, Sum(a8): 224, Confidence: 99,9%
Byte: 53, n = 161, k = 41, Sum(a8):  64, Confidence: 99,1%
Byte: 33, n = 156, k = 117, Sum(a8): 192, Confidence: 99,0%
Byte: eb, n = 154, k = 39, Sum(a8):  64, Confidence: 98,9%
Byte: a3, n = 148, k = 37, Sum(a8):  64, Confidence: 98,8%
Byte: 7c, n = 148, k = 37, Sum(a8):  64, Confidence: 98,8%
Byte: 0e, n = 147, k = 111, Sum(a8): 192, Confidence: 98,7%
Byte: f1, n = 146, k = 110, Sum(a8): 192, Confidence: 98,7%
Byte: c9, n = 141, k = 106, Sum(a8): 192, Confidence: 98,5%
Byte: 09, n = 141, k = 34, Sum(a8):  64, Confidence: 98,4%
Byte: 23, n = 142, k = 108, Sum(a8): 192, Confidence: 98,4%
Byte: 14, n = 135, k = 21, Sum(a8):  32, Confidence: 98,2%
Byte: a6, n = 133, k = 33, Sum(a8):  64, Confidence: 98,1%
Byte: dc, n = 135, k = 101, Sum(a8): 192, Confidence: 98,1%
Byte: ae, n = 140, k = 36, Sum(a8):  64, Confidence: 98,0%
Byte: f9, n = 131, k = 33, Sum(a8):  64, Confidence: 97,9%
Byte: 01, n = 142, k = 109, Sum(a8): 192, Confidence: 97,8%
Byte: a4, n = 131, k = 101, Sum(a8): 192, Confidence: 97,5%
          
Sum(a0) = 104          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 104: 3352365623296 (2^41,6)
Reducing Partial Statelists (p,q) = (2,6) with lengths 17606, 178706
Odd state candidates: 8316 (2^13,0)
Even state candidates: 1406 (2^10,5)
Odd state candidates: 0 (2^-inf)
Even state candidates: 86344 (2^16,4)
Odd state candidates: 0 (2^-inf)
Even state candidates: 86512 (2^16,4)
Odd state candidates: 7606 (2^12,9)
Even state candidates: 1436 (2^10,5)
Reducing Partial Statelists (p,q) = (6,2) with lengths 182032, 17866
Odd state candidates: 49363 (2^15,6)
Even state candidates: 0 (2^-inf)
Odd state candidates: 0 (2^-inf)
Even state candidates: 11316 (2^13,5)
Odd state candidates: 0 (2^-inf)
Even state candidates: 11286 (2^13,5)
Odd state candidates: 47227 (2^15,5)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (10,14) with lengths 181736, 18126
Odd state candidates: 49925 (2^15,6)
Even state candidates: 0 (2^-inf)
Odd state candidates: 0 (2^-inf)
Even state candidates: 11846 (2^13,5)
Odd state candidates: 0 (2^-inf)
Even state candidates: 12226 (2^13,6)
Odd state candidates: 46675 (2^15,5)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (14,10) with lengths 18386, 185062
Odd state candidates: 8676 (2^13,1)
Even state candidates: 1350 (2^10,4)
Odd state candidates: 0 (2^-inf)
Even state candidates: 88914 (2^16,4)
Odd state candidates: 0 (2^-inf)
Even state candidates: 89066 (2^16,4)
Odd state candidates: 8022 (2^13,0)
Even state candidates: 1336 (2^10,4)
Number of remaining possible keys: 45044504 (2^25,4)
Tests: searching for key ffffffffffff after first byte 0x74 (state_odd = 0xffffff, state_even = 0xfffff5) ...
||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x74 (state_odd = 0x3bb334, state_even = 0x8084cd) ...
||||||||||||||||
Brute force phase not yet implemented

Last edited by AT91SAM (2015-11-30 05:06:44)

AT91SAM · 2015-11-30 05:26:13

Here a example of two slow blocks on the same card!

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 91 B s w   
--target block no: 91, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin          
Acquired  1904 nonces ( 1871 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2956 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3908 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4844 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6665 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7072 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9314 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10581 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11053 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11424 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12242 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13061 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13422 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13857 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14217 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14661 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (15011 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15440 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16212 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (18034 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18743 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19798 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20204 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20524 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20910 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21594 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21900 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22273 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23494 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24473 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24766 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25141 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25745 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (26021 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26619 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27212 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27811 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28068 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28367 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28621 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28936 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29193 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29722 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30031 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30266 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30568 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30807 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31095 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31578 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31888 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32124 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32636 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32912 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33895 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34094 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34763 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35039 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35257 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35734 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37098 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37331 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37760 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37953 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38161 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38381 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38967 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39585 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40163 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40573 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41357 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41509 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42436 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42602 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43160 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43312 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43475 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43653 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44317 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44645 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44805 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44971 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45094 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45534 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45832 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (46010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46131 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46296 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46588 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46893 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (47021 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47466 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47722 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (48003 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48516 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48780 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (49025 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49165 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49281 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49413 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49566 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49679 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49804 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49929 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (50067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50158 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50301 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50629 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50761 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50870 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50995 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (51099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51424 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51562 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51645 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51856 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (52094 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52323 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52435 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52610 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52822 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52936 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (53029 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (53145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (53232 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53619 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53717 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53796 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53976 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (54077 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (54177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (54244 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54331 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115024 nonces (54401 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115584 nonces (54486 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116032 nonces (54561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116592 nonces (54659 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117040 nonces (54722 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117600 nonces (54818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 118048 nonces (54886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 118608 nonces (54981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 119056 nonces (55059 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 119504 nonces (55133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 120064 nonces (55230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 120512 nonces (55294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 121072 nonces (55385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 121520 nonces (55464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 122080 nonces (55541 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 122528 nonces (55605 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 123088 nonces (55690 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 123536 nonces (55756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 124096 nonces (55846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 124544 nonces (55914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 125104 nonces (55987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 125552 nonces (56052 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 126112 nonces (56134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 126560 nonces (56186 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 127008 nonces (56253 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 127568 nonces (56323 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 128016 nonces (56388 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 128576 nonces (56470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 129024 nonces (56529 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 129584 nonces (56598 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 129696 nonces in 134,5 seconds (57840 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x30:
Sum(a8) = 0
odd_state =  0xfffffe
even_state = 0xfffff0
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x30:
Sum(a8) = 128
odd_state =  0x3bb335
even_state = 0x8084c8

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 30, n = 238, k = 119, Sum(a8): 128, Confidence: 100,0%
Byte: 3e, n = 231, k = 116, Sum(a8): 128, Confidence: 99,7%
Byte: 1d, n = 231, k = 116, Sum(a8): 128, Confidence: 99,7%
Byte: 45, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: e7, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 3a, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: f8, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: d9, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: c5, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 80, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 52, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 16, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 11, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 09, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 2c, n = 233, k = 118, Sum(a8): 128, Confidence: 99,3%
Byte: fd, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: f4, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: db, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: 3d, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: fe, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: d5, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: c7, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: a5, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 57, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 3c, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 15, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 0b, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: a7, n = 231, k = 131, Sum(a8): 144, Confidence: 99,0%
Byte: fc, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: ee, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: aa, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: 98, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: c3, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 75, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: 62, n = 224, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: da, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: c1, n = 221, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: a4, n = 220, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: 9e, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: 5f, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 27          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0x30 (state_odd = 0xfffffe, state_even = 0xfffff0) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x30 (state_odd = 0x3bb335, state_even = 0x8084c8) ...
e|e|e|e|||||e|||||e|e|e|e|||||||||||||||||||||||||||||||o|||||||||||||||||||||
Brute force phase not yet implemented          
proxmark3> 
proxmark3> hf mf hardnested 0 A 000000000000 92 B s w 
--target block no: 92, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin          
Acquired  2688 nonces ( 2641 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2964 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3499 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3925 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired  5040 nonces ( 4867 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  5600 nonces ( 5395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  6048 nonces ( 5803 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired  6608 nonces ( 6320 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired  7056 nonces ( 6719 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired  7504 nonces ( 7128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired  8064 nonces ( 7625 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired  8512 nonces ( 8018 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired  9072 nonces ( 8512 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired  9520 nonces ( 8902 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 10080 nonces ( 9371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 10528 nonces ( 9745 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 11088 nonces (10216 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 11536 nonces (10595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 12096 nonces (11062 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 12544 nonces (11428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 13104 nonces (11878 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 13552 nonces (12242 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 14112 nonces (12686 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 14560 nonces (13040 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 15008 nonces (13398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 15568 nonces (13861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 16016 nonces (14220 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 16576 nonces (14664 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 17024 nonces (15007 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 17584 nonces (15426 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 18032 nonces (15765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 18592 nonces (16192 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 19040 nonces (16529 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 19600 nonces (16937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 20048 nonces (17270 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 20608 nonces (17680 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 21056 nonces (18016 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 21504 nonces (18340 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 22064 nonces (18756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 22512 nonces (19061 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 23072 nonces (19439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 23520 nonces (19765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 24080 nonces (20146 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 24528 nonces (20455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 25088 nonces (20834 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 25536 nonces (21151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 26096 nonces (21532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 26544 nonces (21827 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 27104 nonces (22214 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 27552 nonces (22487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 28112 nonces (22866 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 28560 nonces (23144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 29008 nonces (23447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 29568 nonces (23806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 30016 nonces (24090 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 30576 nonces (24441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 31024 nonces (24728 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 31584 nonces (25072 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 32032 nonces (25341 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 32592 nonces (25677 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 33040 nonces (25944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 33600 nonces (26279 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 34048 nonces (26552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 34608 nonces (26879 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 35056 nonces (27161 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 35504 nonces (27417 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 36064 nonces (27744 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 36512 nonces (28023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 37072 nonces (28363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 37520 nonces (28612 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 38080 nonces (28927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 38528 nonces (29182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 39088 nonces (29487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 39536 nonces (29735 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 40096 nonces (30045 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 40544 nonces (30285 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 41104 nonces (30594 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 41552 nonces (30838 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 42112 nonces (31145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 42560 nonces (31366 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 43008 nonces (31596 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 43568 nonces (31893 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 44016 nonces (32121 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 44576 nonces (32390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 45024 nonces (32628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 45584 nonces (32905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 46032 nonces (33117 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 46592 nonces (33399 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 47040 nonces (33617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 47600 nonces (33890 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 48048 nonces (34111 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 48608 nonces (34368 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 49056 nonces (34574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 49504 nonces (34811 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 50064 nonces (35064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 50512 nonces (35245 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 51072 nonces (35484 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 51520 nonces (35688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 52080 nonces (35931 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 52528 nonces (36138 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 53088 nonces (36392 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 53536 nonces (36594 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 54096 nonces (36828 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 54544 nonces (37019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 55104 nonces (37258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 55552 nonces (37452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 56112 nonces (37705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 56560 nonces (37887 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 57008 nonces (38099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 57568 nonces (38346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 58016 nonces (38532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 58576 nonces (38756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 59024 nonces (38950 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 59584 nonces (39199 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 60032 nonces (39363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 60592 nonces (39600 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 61040 nonces (39797 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 61600 nonces (40005 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 62048 nonces (40166 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 62608 nonces (40376 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 63056 nonces (40546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 63504 nonces (40727 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 64064 nonces (40930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 64512 nonces (41099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 65072 nonces (41327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 65520 nonces (41501 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 66080 nonces (41714 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 66528 nonces (41880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 67088 nonces (42084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 67536 nonces (42240 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 68096 nonces (42411 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 68544 nonces (42587 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 69104 nonces (42768 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 69552 nonces (42933 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 70112 nonces (43109 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 70560 nonces (43261 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 71008 nonces (43424 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 71568 nonces (43617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 72016 nonces (43762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 72576 nonces (43957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 73024 nonces (44109 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 73584 nonces (44292 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 74032 nonces (44447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 74592 nonces (44627 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 75040 nonces (44760 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 75600 nonces (44946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 76048 nonces (45080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 76608 nonces (45262 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 77056 nonces (45420 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 77504 nonces (45558 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 78064 nonces (45736 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 78512 nonces (45878 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 79072 nonces (46064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 79520 nonces (46196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 80080 nonces (46357 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 80192 nonces in 112,1 seconds (42917 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x14:
Sum(a8) = 0
odd_state =  0xfffffd
even_state = 0xfffff4
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x14:
Sum(a8) = 96
odd_state =  0x3bb336
even_state = 0x8084cc

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:o  [  1]:   [  2]:   [  3]:o  [  4]:o  [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:o  [ 10]:o  [ 11]:   [ 12]:   [ 13]:   [ 14]:o  [ 15]:   
[ 16]:o  [ 17]:   [ 18]:   [ 19]:o  [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:o  [ 26]:o  [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:o  
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:o  [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:o  [ 53]:   [ 54]:   [ 55]:o  
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:o  [ 62]:o  [ 63]:   
[ 64]:o  [ 65]:   [ 66]:   [ 67]:o  [ 68]:o  [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:o  [ 74]:o  [ 75]:   [ 76]:   [ 77]:   [ 78]:o  [ 79]:   
[ 80]:o  [ 81]:   [ 82]:   [ 83]:o  [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:o  [ 90]:o  [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:o  
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:o  [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:o  [117]:   [118]:   [119]:o  
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:o  [126]:o  [127]:   
[128]:o  [129]:   [130]:   [131]:o  [132]:o  [133]:   [134]:   [135]:   
[136]:   [137]:o  [138]:o  [139]:   [140]:   [141]:   [142]:o  [143]:   
[144]:o  [145]:   [146]:   [147]:o  [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:o  [154]:o  [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:o  
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:o  [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:o  [181]:   [182]:   [183]:o  
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:o  [190]:o  [191]:   
[192]:o  [193]:   [194]:   [195]:o  [196]:o  [197]:   [198]:   [199]:   
[200]:   [201]:o  [202]:o  [203]:   [204]:   [205]:   [206]:o  [207]:   
[208]:o  [209]:   [210]:   [211]:o  [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:o  [218]:o  [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:o  
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:o  [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:o  [245]:   [246]:   [247]:o  
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:o  [254]:o  [255]:   

Tests: Best 40 first bytes:
Byte: 14, n = 181, k = 181, Sum(a8): 256, Confidence: 100,0%
Byte: f7, n = 182, k = 182, Sum(a8): 256, Confidence: 100,0%
Byte: f0, n = 170, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: de, n = 176, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: dd, n = 172, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: da, n = 185, k = 185, Sum(a8): 256, Confidence: 100,0%
Byte: be, n = 183, k = 183, Sum(a8): 256, Confidence: 100,0%
Byte: b0, n = 189, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 9a, n = 173, k = 173, Sum(a8): 256, Confidence: 100,0%
Byte: 94, n = 193, k = 193, Sum(a8): 256, Confidence: 100,0%
Byte: 7a, n = 178, k = 178, Sum(a8): 256, Confidence: 100,0%
Byte: 77, n = 181, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 70, n = 181, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 5d, n = 186, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 5a, n = 185, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 3e, n = 189, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 3a, n = 178, k = 178, Sum(a8): 256, Confidence: 100,0%
Byte: 30, n = 187, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 1a, n = 174, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 17, n = 170, k = 170, Sum(a8): 256, Confidence: 100,0%
Byte: c3, n = 192, k = 145, Sum(a8): 192, Confidence: 99,6%
Byte: 69, n = 182, k = 134, Sum(a8): 192, Confidence: 99,4%
Byte: 98, n = 199, k = 73, Sum(a8):  96, Confidence: 99,1%
Byte: 32, n = 193, k = 125, Sum(a8): 160, Confidence: 99,1%
Byte: 43, n = 183, k = 44, Sum(a8):  64, Confidence: 99,1%
Byte: 92, n = 197, k = 69, Sum(a8):  96, Confidence: 98,9%
Byte: 93, n = 184, k = 118, Sum(a8): 160, Confidence: 98,8%
Byte: 50, n = 187, k = 119, Sum(a8): 160, Confidence: 98,7%
Byte: 90, n = 181, k = 116, Sum(a8): 160, Confidence: 98,6%
Byte: e9, n = 182, k = 139, Sum(a8): 192, Confidence: 98,5%
Byte: a3, n = 182, k = 49, Sum(a8):  64, Confidence: 98,4%
Byte: 67, n = 182, k = 64, Sum(a8):  96, Confidence: 98,3%
Byte: b7, n = 185, k = 117, Sum(a8): 160, Confidence: 98,1%
Byte: dc, n = 173, k = 111, Sum(a8): 160, Confidence: 98,0%
Byte: 37, n = 183, k = 64, Sum(a8):  96, Confidence: 98,0%
Byte: 5c, n = 172, k = 111, Sum(a8): 160, Confidence: 97,9%
Byte: 72, n = 171, k = 110, Sum(a8): 160, Confidence: 97,9%
Byte: 07, n = 180, k = 117, Sum(a8): 160, Confidence: 97,8%
Byte: 7d, n = 182, k = 115, Sum(a8): 160, Confidence: 97,8%
Byte: d2, n = 184, k = 68, Sum(a8):  96, Confidence: 97,7%
          
Sum(a0) = 144          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 144: 13750076573696 (2^43,6)
Reducing Partial Statelists (p,q) = (4,10) with lengths 73420, 185062
Odd state candidates: 34545 (2^15,1)
Even state candidates: 136568 (2^17,1)
Odd state candidates: 34708 (2^15,1)
Even state candidates: 135970 (2^17,1)
Reducing Partial Statelists (p,q) = (6,12) with lengths 182032, 73356
Odd state candidates: 100774 (2^16,6)
Even state candidates: 52712 (2^15,7)
Odd state candidates: 97818 (2^16,6)
Even state candidates: 53508 (2^15,7)
Reducing Partial Statelists (p,q) = (10,4) with lengths 181736, 74304
Odd state candidates: 102284 (2^16,6)
Even state candidates: 54020 (2^15,7)
Odd state candidates: 99348 (2^16,6)
Even state candidates: 54280 (2^15,7)
Reducing Partial Statelists (p,q) = (12,6) with lengths 74240, 178706
Odd state candidates: 36413 (2^15,2)
Even state candidates: 129848 (2^17,0)
Odd state candidates: 36852 (2^15,2)
Even state candidates: 130064 (2^17,0)
Number of remaining possible keys: 40422297824 (2^35,2)
Tests: searching for key ffffffffffff after first byte 0x14 (state_odd = 0xfffffd, state_even = 0xfffff4) ...
||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x14 (state_odd = 0x3bb336, state_even = 0x8084cc) ...
||||||||
Brute force phase not yet implemented

piwi · 2015-11-30 08:37:46

But after 10 minutes of repeating 0% it starts finding valid nounces and will come with a result.

Acquired a total of 129696 nonces in 134,5 seconds (57840 nonces/minute)

134,5 seconds are a little more than 2 minutes - not 10 minutes. So there is definitely something wrong at your side. Either the PM claims to send more nonces than it really can (num_acquired_nonces can't be more than 112, please check) or the displayed time is wrong. Can you tell?

AT91SAM · 2015-11-30 14:05:33

Well it takes lomg IMO....

What it does on some tracks is this

Acquired 20608 nonces (17657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 21056 nonces (17993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 21504 nonces (18322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22064 nonces (18713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22512 nonces (19024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9

It saiys 9 thghen 10 time 10 and then it fals back to 9 ...
It has to do with the block iam requesting this is block 104 .... the second slow post was 91 and 95 ... block 255 on same card was in my first post I posted this (Today 06:06:44)
so at some blocks it just takes long before it leaves 0 % , some blocks stay long at 20% and some at 9% ,,,this post .... if it does not matter for the calculations then this is no problem .... only wondering why it stays so long at f.e 0% ....
looks like some blocks calculate faster then others.

[== Undefined ==]
Writing acquired nonces to binary file nonces.bin          
Acquired  1680 nonces ( 1659 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2948 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3479 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4416 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4825 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  5600 nonces ( 5345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  6048 nonces ( 5757 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired  6608 nonces ( 6260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  7056 nonces ( 6666 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  7504 nonces ( 7064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  8064 nonces ( 7561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  8512 nonces ( 7957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired  9072 nonces ( 8430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired  9520 nonces ( 8818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 10080 nonces ( 9297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 10528 nonces ( 9675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 11088 nonces (10150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 11536 nonces (10520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 12096 nonces (10984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 12544 nonces (11364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 13104 nonces (11828 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 13552 nonces (12187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 14112 nonces (12630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 14560 nonces (12984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 15008 nonces (13336 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 15568 nonces (13796 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 16016 nonces (14144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 16576 nonces (14590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 17024 nonces (14946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 17584 nonces (15394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 18032 nonces (15737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 18592 nonces (16171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 19040 nonces (16498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 19600 nonces (16918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 20048 nonces (17250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 20608 nonces (17657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 21056 nonces (17993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 21504 nonces (18322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22064 nonces (18713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22512 nonces (19024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9

AT91SAM · 2015-11-30 14:17:35

here my last probe for block 104.
you see it stays a while at 9% ,,, with block 91 it stays the same way relatively long at 0% ,,, with block 92 difrent key the block 91 it stays relatively long at 20%
How long long is in seconds I did not time with a second device but I pasted the full logs , so noting is removes so you can see the times the % counter stays at 0% before it increases , and in the block 92 probe the times it waited at 20%
all probes are on the same card and if i change the card it does not happen on that card or it hapends on other blocks...

fyi all tests are done after changing all uint16_t to uint32_t in cmdhfmfhard.c

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 104 B s w 
--target block no:104, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin          
Acquired  1680 nonces ( 1659 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2948 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3479 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4416 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4825 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  5600 nonces ( 5345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired  6048 nonces ( 5757 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired  6608 nonces ( 6260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  7056 nonces ( 6666 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  7504 nonces ( 7064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  8064 nonces ( 7561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  8512 nonces ( 7957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired  9072 nonces ( 8430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired  9520 nonces ( 8818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 10080 nonces ( 9297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 10528 nonces ( 9675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 11088 nonces (10150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 11536 nonces (10520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 12096 nonces (10984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 12544 nonces (11364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 13104 nonces (11828 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 13552 nonces (12187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 14112 nonces (12630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 14560 nonces (12984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 15008 nonces (13336 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 15568 nonces (13796 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 16016 nonces (14144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 16576 nonces (14590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 17024 nonces (14946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 17584 nonces (15394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 18032 nonces (15737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 18592 nonces (16171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 19040 nonces (16498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 19600 nonces (16918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 20048 nonces (17250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 20608 nonces (17657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 21056 nonces (17993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 21504 nonces (18322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22064 nonces (18713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 22512 nonces (19024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 23072 nonces (19423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 23520 nonces (19731 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 24080 nonces (20111 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 24528 nonces (20416 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 25088 nonces (20804 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 25536 nonces (21112 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 26096 nonces (21484 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 26544 nonces (21778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 27104 nonces (22145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 27552 nonces (22431 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 28112 nonces (22802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 28560 nonces (23102 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 29008 nonces (23403 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 29568 nonces (23774 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 30016 nonces (24058 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 30576 nonces (24419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 31024 nonces (24696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 31584 nonces (25034 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 32032 nonces (25294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 32592 nonces (25633 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 33040 nonces (25903 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 33600 nonces (26227 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 34048 nonces (26497 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 34608 nonces (26823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 35056 nonces (27083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 35504 nonces (27357 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 36064 nonces (27696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 36512 nonces (27951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 37072 nonces (28274 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 37520 nonces (28518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 38080 nonces (28812 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 38528 nonces (29055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 39088 nonces (29393 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 39536 nonces (29644 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 40096 nonces (29947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 40544 nonces (30180 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 41104 nonces (30478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 41552 nonces (30715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 42112 nonces (31002 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 42560 nonces (31249 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 43008 nonces (31483 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 43568 nonces (31756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 44016 nonces (31982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 44576 nonces (32260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 45024 nonces (32499 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 45584 nonces (32788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 46032 nonces (33005 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 46592 nonces (33287 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 47040 nonces (33487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 47600 nonces (33770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 48048 nonces (33987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 48608 nonces (34246 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 49056 nonces (34450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 49504 nonces (34664 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 50064 nonces (34922 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 50512 nonces (35117 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 51072 nonces (35362 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 51520 nonces (35578 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 52080 nonces (35823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 52528 nonces (36012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 53088 nonces (36251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 53536 nonces (36469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 54096 nonces (36716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 54544 nonces (36909 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 55104 nonces (37157 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 55552 nonces (37363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 56112 nonces (37567 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 56560 nonces (37766 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 57008 nonces (37935 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 57568 nonces (38176 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 58016 nonces (38364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 58576 nonces (38589 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 59024 nonces (38782 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 59584 nonces (39031 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 60032 nonces (39228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 60592 nonces (39457 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 61040 nonces (39639 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 61600 nonces (39856 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 62048 nonces (40017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 62608 nonces (40231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 63056 nonces (40400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 63504 nonces (40564 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 64064 nonces (40760 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 64512 nonces (40924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 65072 nonces (41135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 65520 nonces (41304 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 66080 nonces (41509 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 66528 nonces (41673 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 67088 nonces (41872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 67536 nonces (42015 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 68096 nonces (42196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 68544 nonces (42371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 69104 nonces (42581 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 69552 nonces (42726 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 70112 nonces (42913 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 70560 nonces (43068 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 71008 nonces (43229 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 71568 nonces (43438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 72016 nonces (43578 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 72576 nonces (43778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 73024 nonces (43944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 73584 nonces (44121 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 74032 nonces (44265 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 74592 nonces (44455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 75040 nonces (44590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 75600 nonces (44764 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 76048 nonces (44900 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 76608 nonces (45073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 77056 nonces (45224 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 77504 nonces (45370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 78064 nonces (45545 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 78512 nonces (45675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 79072 nonces (45838 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 79520 nonces (45963 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 80080 nonces (46133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 80528 nonces (46261 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 81088 nonces (46422 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 81536 nonces (46561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 82096 nonces (46692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 82544 nonces (46813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 83104 nonces (46955 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 83552 nonces (47103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 84112 nonces (47250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 84560 nonces (47385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 85008 nonces (47507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 85568 nonces (47654 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 86016 nonces (47782 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired 86576 nonces (47916 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 26
Acquired a total of 86688 nonces in 116,2 seconds (44770 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x05:
Sum(a8) = 256
odd_state =  0xfffffe
even_state = 0xffffff
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x05:
Sum(a8) = 160
odd_state =  0x3bb33a
even_state = 0x8084c7

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]: e [  1]:   [  2]: e [  3]:   [  4]:   [  5]: e [  6]:   [  7]: e 
[  8]: e [  9]:   [ 10]: e [ 11]:   [ 12]:   [ 13]: e [ 14]:   [ 15]: e 
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]: e [ 33]:   [ 34]: e [ 35]:   [ 36]:   [ 37]: e [ 38]:   [ 39]: e 
[ 40]: e [ 41]:   [ 42]: e [ 43]:   [ 44]:   [ 45]: e [ 46]:   [ 47]: e 
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]: e [ 65]:   [ 66]: e [ 67]:   [ 68]:   [ 69]: e [ 70]:   [ 71]: e 
[ 72]: e [ 73]:   [ 74]: e [ 75]:   [ 76]:   [ 77]: e [ 78]:   [ 79]: e 
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]: e [ 97]:   [ 98]: e [ 99]:   [100]:   [101]: e [102]:   [103]: e 
[104]: e [105]:   [106]: e [107]:   [108]:   [109]: e [110]:   [111]: e 
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]: e [129]:   [130]: e [131]:   [132]:   [133]: e [134]:   [135]: e 
[136]: e [137]:   [138]: e [139]:   [140]:   [141]: e [142]:   [143]: e 
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]: e [161]:   [162]: e [163]:   [164]:   [165]: e [166]:   [167]: e 
[168]: e [169]:   [170]: e [171]:   [172]:   [173]: e [174]:   [175]: e 
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]: e [193]:   [194]: e [195]:   [196]:   [197]: e [198]:   [199]: e 
[200]: e [201]:   [202]: e [203]:   [204]:   [205]: e [206]:   [207]: e 
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]: e [225]:   [226]: e [227]:   [228]:   [229]: e [230]:   [231]: e 
[232]: e [233]:   [234]: e [235]:   [236]:   [237]: e [238]:   [239]: e 
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 05, n = 194, k = 169, Sum(a8): 224, Confidence: 100,0%
Byte: f3, n = 191, k = 191, Sum(a8): 256, Confidence: 100,0%
Byte: b3, n = 186, k = 186, Sum(a8): 256, Confidence: 100,0%
Byte: a7, n = 187, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: a0, n = 177, k = 17, Sum(a8):  32, Confidence: 100,0%
Byte: 71, n = 186, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 53, n = 196, k = 196, Sum(a8): 256, Confidence: 100,0%
Byte: 51, n = 193, k = 23, Sum(a8):  32, Confidence: 100,0%
Byte: 31, n = 197, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 25, n = 186, k = 186, Sum(a8): 256, Confidence: 100,0%
Byte: 13, n = 179, k = 179, Sum(a8): 256, Confidence: 100,0%
Byte: 07, n = 179, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 82, n = 180, k = 157, Sum(a8): 224, Confidence: 100,0%
Byte: 22, n = 192, k = 166, Sum(a8): 224, Confidence: 100,0%
Byte: 11, n = 183, k = 25, Sum(a8):  32, Confidence: 100,0%
Byte: 73, n = 195, k = 49, Sum(a8):  64, Confidence: 99,8%
Byte: 93, n = 186, k = 47, Sum(a8):  64, Confidence: 99,8%
Byte: ed, n = 197, k = 126, Sum(a8): 160, Confidence: 99,5%
Byte: 19, n = 184, k = 139, Sum(a8): 192, Confidence: 99,4%
Byte: d3, n = 179, k = 47, Sum(a8):  64, Confidence: 99,4%
Byte: 88, n = 185, k = 136, Sum(a8): 192, Confidence: 99,4%
Byte: 0d, n = 185, k = 49, Sum(a8):  64, Confidence: 99,4%
Byte: 2f, n = 194, k = 125, Sum(a8): 160, Confidence: 99,4%
Byte: 9b, n = 182, k = 138, Sum(a8): 192, Confidence: 99,2%
Byte: 75, n = 195, k = 71, Sum(a8):  96, Confidence: 99,2%
Byte: b7, n = 187, k = 67, Sum(a8):  96, Confidence: 99,0%
Byte: fb, n = 186, k = 120, Sum(a8): 160, Confidence: 98,9%
Byte: bb, n = 191, k = 124, Sum(a8): 160, Confidence: 98,7%
Byte: 33, n = 195, k = 46, Sum(a8):  64, Confidence: 98,5%
Byte: 14, n = 184, k = 67, Sum(a8):  96, Confidence: 98,5%
Byte: 76, n = 178, k = 64, Sum(a8):  96, Confidence: 98,4%
Byte: 8f, n = 185, k = 50, Sum(a8):  64, Confidence: 98,2%
Byte: 96, n = 181, k = 115, Sum(a8): 160, Confidence: 98,2%
Byte: 79, n = 185, k = 117, Sum(a8): 160, Confidence: 98,1%
Byte: f7, n = 193, k = 121, Sum(a8): 160, Confidence: 97,8%
Byte: b1, n = 185, k = 142, Sum(a8): 192, Confidence: 97,7%
Byte: a5, n = 181, k = 42, Sum(a8):  64, Confidence: 97,7%
Byte: db, n = 184, k = 134, Sum(a8): 192, Confidence: 97,6%
Byte: 91, n = 187, k = 122, Sum(a8): 160, Confidence: 97,5%
Byte: 80, n = 186, k = 43, Sum(a8):  64, Confidence: 97,4%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 26          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 16505 (2^14,0)
Even state candidates: 0 (2^-inf)
Odd state candidates: 662 (2^9,4)
Even state candidates: 74684 (2^16,2)
Odd state candidates: 660 (2^9,4)
Even state candidates: 73730 (2^16,2)
Odd state candidates: 16178 (2^14,0)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 57682 (2^15,8)
Even state candidates: 0 (2^-inf)
Odd state candidates: 1897 (2^10,9)
Even state candidates: 29766 (2^14,9)
Odd state candidates: 2023 (2^11,0)
Even state candidates: 28812 (2^14,8)
Odd state candidates: 56109 (2^15,8)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 58890 (2^15,8)
Even state candidates: 0 (2^-inf)
Odd state candidates: 1927 (2^10,9)
Even state candidates: 28632 (2^14,8)
Odd state candidates: 1989 (2^11,0)
Even state candidates: 27646 (2^14,8)
Odd state candidates: 56581 (2^15,8)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 17933 (2^14,1)
Even state candidates: 0 (2^-inf)
Odd state candidates: 650 (2^9,3)
Even state candidates: 77592 (2^16,2)
Odd state candidates: 624 (2^9,3)
Even state candidates: 76626 (2^16,2)
Odd state candidates: 18162 (2^14,1)
Even state candidates: 0 (2^-inf)
Number of remaining possible keys: 421266568 (2^28,7)
Tests: searching for key ffffffffffff after first byte 0x05 (state_odd = 0xfffffe, state_even = 0xffffff) ...
||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x05 (state_odd = 0x3bb33a, state_even = 0x8084c7) ...
||||||||||||||||
Brute force phase not yet implemented

Last edited by AT91SAM (2015-11-30 14:19:29)

piwi · 2015-11-30 15:15:59

This is all about statistics and probabilities. So it is perfectly OK, that

it takes some time until enough data has been gathered to reach the probability threshold. The numbers of probably correctly guessed Sum properties then can jump from zero to a certain number.
sometimes the number drops again. This is the case when new data is gathered which contradicts a previous guess which then needs to be revised.

But all this is not relevant as long as you (well, your PC) are analyzing wrong data. Again,

Acquired a total of 86688 nonces in 116,2 seconds (44770 nonces/minute)

The third number is calculated from the first two (86688 / 116,2 * 60 = 44770 with some rounding error). The Proxmark can only deliver nonces with a rate of roughly 6000 to 8000 nonces per minute. This means that either

the time is not correctly measured. You cannot see this from the log but you can easily check by looking at your watch when acquiring the nonces. If the Proxmark were expected to deliver 86688 nonces this should last at least 11 minutes, not only 2.
of the number of nonces is not correct. Within 116,2 seconds the Proxmark can send at most roughly 15000 nonces. This means that of the 86688 nonces analyzed by the client software, more than 70000 are nonsense.

We need not look at the output as long as we know that the input must be wrong. The first step would be to tell us how long nonce acquisition really takes for you. Just look at your watch when you enter the command and then again when it says "Acquired a total of ..." and tell us how long it really takes. During this time (some) LEDs on your Proxmark should be on but regularily switch off for a blink of an eye.

AT91SAM · 2015-11-30 16:52:19

search for REAL TIME in loge to get past 0% took 15 minutes 56
to get to 25% took 18 minutes 02
this only hapends with block 91 KEY B in that is takes this long...
Key A same block goes faster its a hardnested only card so i dont know the keys I will check for old hotel cards that are sensitive for the nested attack to see if i can discover a pattern in (secret) key relative to time.
to get valid data.

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 91 B  s w 
--target block no: 91, target key type:B, file action: write, Slow: Yes           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin          
Acquired  1792 nonces ( 1762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2528 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2961 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3486 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3901 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4421 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4836 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5759 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6268 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7069 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8824 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9320 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9708 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10175 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10555 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11391 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12222 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13046 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13427 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13874 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14216 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14655 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15754 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17256 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (17992 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18731 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19057 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19774 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20162 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21173 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22221 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22865 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23186 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23474 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23835 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24759 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25112 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25372 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25717 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25978 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26296 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26895 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27167 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28593 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29148 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30276 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30557 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30793 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31109 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31335 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31575 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32105 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32926 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33424 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33632 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34105 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34620 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34814 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35049 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35277 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35524 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35741 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36172 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36605 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37058 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37293 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37723 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38110 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38531 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38935 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39160 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39569 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39733 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39943 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40352 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41078 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41465 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41661 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42011 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42161 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43203 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43900 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44041 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44214 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44357 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44519 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44653 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44808 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (44955 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45152 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45296 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45598 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45739 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46341 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46663 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46822 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47140 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47252 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47382 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47503 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47639 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47782 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48593 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48976 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49320 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49554 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49694 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49968 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50299 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50641 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50747 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51088 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51209 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51300 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51513 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51633 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52107 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52229 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52334 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52619 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52805 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (53010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53130 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53206 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53311 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53585 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53681 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53761 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53847 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53936 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (54024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54109 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0

REAL TIME TO GET HERE is 15minutes  56 seconds 

Acquired 115024 nonces (54185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115584 nonces (54285 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 116032 nonces (54363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 116592 nonces (54462 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117040 nonces (54545 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117600 nonces (54652 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54719 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 118608 nonces (54812 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 119056 nonces (54884 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 119504 nonces (54958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 120064 nonces (55044 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 120512 nonces (55112 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 121072 nonces (55202 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 121520 nonces (55272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 122080 nonces (55374 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 122528 nonces (55443 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 123088 nonces (55522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 123536 nonces (55596 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 124096 nonces (55671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124544 nonces (55737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 125104 nonces (55823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 125552 nonces (55894 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 126112 nonces (55982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 126560 nonces (56036 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 127008 nonces (56110 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 127568 nonces (56179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 128016 nonces (56232 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 128576 nonces (56314 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 129024 nonces (56384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 129584 nonces (56453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 130032 nonces (56515 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired a total of 130368 nonces in 134,4 seconds (58189 nonces/minute)   
REAL TIME IS 18 m : 02 sec       
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x74:
Sum(a8) = 256
odd_state =  0xffffff
even_state = 0xfffff5
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x74:
Sum(a8) = 136
odd_state =  0x3bb334
even_state = 0x8084cd

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 74, n = 234, k = 117, Sum(a8): 128, Confidence: 99,9%
Byte: e7, n = 230, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: 86, n = 231, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: e3, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: db, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 6c, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 68, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 35, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 9a, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: ea, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: d8, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: a2, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 98, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 3d, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 2d, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 7d, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 02, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 97, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 94, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 7b, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 4b, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 44, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 41, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 33, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 26, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 63, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 21, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: 46, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 3a, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 00, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0x74 (state_odd = 0xffffff, state_even = 0xfffff5) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x74 (state_odd = 0x3bb334, state_even = 0x8084cd) ...
|||||||e||||||||||||||||||||||||||||||||||||||||o|||||||||||||||||||||
Brute force phase not yet implemented

AT91SAM · 2015-11-30 18:20:58

here 2 keys I found in a old style card sesitive to nedted attack...
theese keys give the same effect on hardnested ,,, it takes ages.

a6b9aa97b955
and
26f878ab1f20

I see a6/26 as first pattern

mabey you reproduce if you store 1 or both keys in your testcard and try to run hardnested...
if this works analyze the data maby its usefull as a unkown known
to reduce the keys .

piwi · 2015-12-01 11:54:48

REAL TIME IS 18 m : 02 sec

OK, thanks. Obviously the time has not been measured correctly. Fixed it for my next commit.

Sum-Property is 128 for all your nonces first bytes. This doesn't allow to reduce the search space significantly and it takes many nonces to confirm a Sum Property of 128. So this explains both the long acquisition time and the high number of remaining keys. Let me see what can be done...

I will check for old hotel cards that are sensitive for the nested attack

Probably not a good idea. Cards which are sensitive to the nested attack will have a broken PRNG. There are only 2^16 different 4 Byte nonces produced by them. The first 2 bytes of these nonces will probably not have the necessary entropy for a successful analysis by hardnested.

AT91SAM · 2015-12-01 20:36:59

2^16 is not very mutch.

saw that behavior on old cards did not get passed 0%

waiting for updates to test.

Last edited by AT91SAM (2015-12-01 20:37:31)

AT91SAM · 2015-12-08 02:22:50

@piwi Any updates?

piwi · 2015-12-08 07:24:21

Not really. I have explored several possibilities to select the first byte {b} but it doesn't make a substantial difference. I still cannot verify a substantial reduction of search space ("1 bit per byte {b'}") with the differential analysis. For standard keys it reaches 2^32, with one of your examples (key a6b9aa97b955) it reaches 2^42. If we assume that a brute force implementation would take 1 minute for 2^32 keys, it would take 17 hours for 2^42. This is not what had been claimed in the paper.

I continue to look for an implementation error. Eventually I might add evaluating the bit flip property which should help in your cases (as they show to have this property).

AT91SAM · 2015-12-08 14:20:28

I had the impression that he used a GPU in his demonstrations.
because reduction was not possible all the time ...
when I read the paper , that could explain the outcome...
2⁴42 on a cheap video GPU would take a few minutes...
"we implemented a brute force attach on a nvidea GTX460"
is clearly explained ,,, with a even faster video card this can be seconds...
so my guess is they used a cheap videocard to preform the demonstration.
doing this makes the hack doable in the real world.
If hardnesdted requires a videocard I dont see that as a problem , since theese things are dirt cheap ,, and probably you can use modified cryptocurrency minder software in scrypt mode.
to do the brute force.

https://en.wikipedia.org/wiki/Scrypt#Algorithm

Function scrypt(Passphrase,Salt,N,p,dkLen):
(B0 ... Bp−1) ← PBKDF2HMAC_SHA256(Passphrase, Salt, 1, p * MFLen)
for i = 0 to p-1 do
Bi ← SMix(Bi,N)
end for
Output ← PBKDF2HMAC_SHA256(Passphrase, B0 || B1 ... Bp−1, 1, dkLen)

Function SMix(B,N):
X ← B
for i = 0 to N − 1 do
Vi ← X
X ← BlockMix(X)
end for
for i = 0 to N − 1 do
j ← Integerify(X) mod N
X ← BlockMix(X ⊕ Vj)
end for
Output ← X

Integerify() is a bijective function from {0, 1}k to {0,...,2k− 1}.

Function BlockMix(B):
(B0, ... , B2r-1) ← B
X ← B2r−1
for i = 0 to 2r − 1 do
X ← H(X ⊕ Bi)
Yi ← X
end for
Output ← (Y0, Y2, ... , Y2r−2, Y1, Y3, ... , Y2r−1)

Is the algo used for SCRYPT brute force.....

software for brute forcing can be found everywhere....
and if you have old unused crypto currency cards gaining dust its a great way to use them.
Hope this is helpful.
80% for proving a paper most of the time is setting up a real world situation , most people do not verify 100% of the claims IMO.
This is a other implementation of videocard ¨password" brutefoceing http://www.crark.net/

Maby this helps you further.

BTW found this http://hitcon.org/download/2010/11_MIFA … Broken.pdf
looks quite usefull

Last edited by AT91SAM (2015-12-08 15:17:52)

AT91SAM · 2015-12-08 22:05:40

piwi wrote:

Not really. I have explored several possibilities to select the first byte {b} but it doesn't make a substantial difference. I still cannot verify a substantial reduction of search space ("1 bit per byte {b'}") with the differential analysis. For standard keys it reaches 2^32, with one of your examples (key a6b9aa97b955) it reaches 2^42. If we assume that a brute force implementation would take 1 minute for 2^32 keys, it would take 17 hours for 2^42. This is not what had been claimed in the paper.
I continue to look for an implementation error. Eventually I might add evaluating the bit flip property which should help in your cases (as they show to have this property).

So lets hope you find something , but I also read that they used a videocard in the test.

piwi · 2015-12-09 07:59:25

AT91SAM wrote:

so my guess is they used a cheap videocard to preform the demonstration.

I am not sure. Roel wrote

From this figure we can observe that the leftover complexity quickly becomes within reach of solving on ordinary hardware within minutes. Typically, after collecting approximately 10,000 - 20,000 nonces, the leftover complexity is solvable even within seconds.

I guess that "ordinary hardware" doesn't include GPUs. The referred figure shows a leftover complexity of 2^25 keys in the second quartile after 20,000 nonces. That would be possible within a few seconds without GPU. The table 7.1 claims 5-10minutes Compute time. This would be too long with GPU.

AT91SAM · 2015-12-09 10:56:48

I might add evaluating the bit flip property which should help in your cases (as they show to have this property).

This would make sense , because if that example key is the reverse of the "flipped bit"
it would have less ways to reduce it self....
its like standing in the shadow of the reduction formulas I guess.
there must be implementation mistakes , like the 2¹16 mistake.
hard to imagine that one was not intended to be
so just keep searching if you want me to test things let me know

piwi · 2015-12-10 08:04:18

AT91SAM wrote:

This would make sense , because if that example key is the reverse of the "flipped bit"
it would have less ways to reduce it self....
its like standing in the shadow of the reduction formulas I guess.

No idea what you mean. The Bit Flip property is an additional property we can use. It is independent of the Sum property. Or at least I haven't seen publications showing a dependency.

The reason for your example keys being soemthing like "worst case" for hf mf hardnested are their (in combination with the UID) resulting sum properties. The Sum properties before and after byte {b} are those with the most possible remaining crypto states.

AT91SAM wrote:

there must be implementation mistakes , like the 2¹16 mistake.
hard to imagine that one was not intended to be

The "2^16 mistake" is a result of an implementation flaw of the Mifare Classic PRNG which is known since years. hf mf nested and hf mf mifare make use of it. It was definitely not intended and it was not what I was referring to, when I said "look for an implementation error". Instead I had been referring to a possible bug in my hf mf hardnested implementation which might cause the deviation from the paper's claims.

AT91SAM · 2015-12-10 14:41:20

No idea what you mean. The Bit Flip property is an additional property we can use. It is independent of the Sum property. Or at least I haven't seen publications showing a dependency.
The reason for your example keys being soemthing like "worst case" for hf mf hardnested are their (in combination with the UID) resulting sum properties. The Sum properties before and after byte {b} are those with the most possible remaining crypto states.

Well I tougt the flip bit could be used as a kind of polarity flip.
like this when low is for example -32767 and high is +32767 with the flip bit you can change this property
so -32768 becomes +32767 and +32767 becomes -32767.
thus in this way also bit flipping can be used from many to few.
like this
like this 1000 0000 0000 0000 so were the most left bit is a flip bit
that acts to reverse the hole state from +/- and -/+ if you the rest of the 15 bits just have the value.
if this is the case it could reverse hard to easy and easy to hard ,, by just 2 runs fire -/+ then same in inverted in +/- mode...
making the hard keys easy....
just my idea of flip bit.

when state most left bit = 0 value of the other bits 000 0000 0000 0001 = + 1 when bit = 1 value the other bits of 000 0000 0000 0001 = - 1

or maybe it is possible to feed the card "Reverse input" like +/- and than -/+ so the randomizing gives opposite results....

maybe it matters if you test this.

hf mf hardnested 0 A (key) 4 B VS hf mf hardnested 81 A (key) 4 B VS hf mf hardnested 0 B (key) 4 B
to just see if it gives diffrent results
a lot more in behavior details ,, and you don't need to put this research in the paper or just put it in a other paper you don't release.

Last edited by AT91SAM (2015-12-11 02:01:03)

AT91SAM · 2015-12-14 00:35:30

@piwi Would it not be better to build in the brute force part?
Why , because this is the only way to find out if keys are deducted correctly.
it could also help to create a kind of rainbow table ,, of valid keys found.
against sum etc..
so it could find other useful patterns.
I don't mind searching 24 hours or even more for one key if needed.
to me the paper looks like
1 they only tested a very limited number of keys in this paper,
2 they gained improvements on results from analyzing sum data in combination with every valid key found , finding new patterns.
3 the paper was never properly checked...

Last edited by AT91SAM (2015-12-14 00:37:20)

piwi · 2015-12-14 08:21:44

@piwi Would it not be better to build in the brute force part?
Why , because this is the only way to find out if keys are deducted correctly.

I will add the possibility to enter the known key as a parameter to hf mf hardnested. Checking the remaining keys for the known key will be much faster than brute forcing.

AT91SAM · 2015-12-14 16:10:35

I will add the possibility to enter the known key as a parameter to hf mf hardnested. Checking the remaining keys for the known key will be much faster than brute forcing.

That's not the same.
I will explain why.

There is a difference between walking a path and knowing the path.
Only if you randomly walk the path you will find unexpected results!
and its the unexpected results aka new findings you need.
if you only allow known keys you still test a very limited number of keys....
if you lat the app brute force you test many more keys. and store the found results and compare them afterwards.
that's the correct way to find a flaw , leaving all assumptions go.
A way to test this brute force app would be easy.
empty cards
use a program that write random key A and B for every sector.
keep the used files that were written on the cards so you can check afterwards!!
Let the hardnested brute force.
then find store time , if key was found, uid , sector , sector started from , etc...
by testing 1000+ of keys... iit's very likely you will find unexpected results...
you don't know the why of the unexpected but thatś the ting you need to test next!
Its the idea of fuzzing....
explained here VPRO backlight zero days
fuzzing is the way to find unknown exceptions because nobody saw the exceptions on forehand!
always expect the unexpected because maths on unknown hardware...
gives unexpected results not because of the maths but because of the hardware
Pentium FDIV bug was a nice example.
https://en.wikipedia.org/wiki/Pentium_FDIV_bug is also a nice example of this.....
For some reason I can not add this last link as clickeble in this message.....

This is what the bug was in short:
"
The Pentium FDIV bug is a bug in the Intel P5 Pentium floating point unit (FPU). Because of the bug, the processor can return incorrect decimal results, an issue troublesome for the precise calculations needed in fields like math and science. Discovered by Professor Thomas R. Nicely at Lynchburg College,[1] Intel attributed the error to missing entries in the lookup table used by the floating-point division circuitry.[2]

Though rarely encountered by average users (Byte magazine estimated that 1 in 9 billion floating point divides with random parameters would produce inaccurate results),[3] both the flaw and Intel's initial handling of the matter were heavily criticized. Intel ultimately recalled the defective processors.

Chronology

Thomas Nicely, a professor of mathematics at Lynchburg College, had written code to enumerate primes, twin primes, prime triplets, and prime quadruplets. Nicely noticed some inconsistencies in the calculations on June 13, 1994, shortly after adding a Pentium system to his group of computers, but was unable to eliminate other factors (such as programming errors, motherboard chipsets, etc.) until October 19, 1994. On October 24, 1994, he reported the issue to Intel. According to Nicely, his contact person at Intel later admitted that Intel had been aware of the problem since May 1994, when the flaw was discovered by Tom Kraljevic, a Purdue co-op student working for Intel in Hillsboro, OR, during testing of the FPU for its new P6 core, first used in the Pentium Pro.

On October 30, 1994, Nicely sent an email describing the error he had discovered in the Pentium floating point unit to various contacts, requesting reports of testing for the flaw on 486-DX4s, Pentiums and Pentium clones.[1]

This flaw in the Pentium FPU was quickly verified by other people around the Internet, and became known as the Pentium FDIV bug (FDIV is the x86 assembly language mnemonic for floating-point division). One example was found where the division result returned by the Pentium was off by about 61 parts per million.[1]

The story first appeared in the press on November 7, 1994, in an article in Electronic Engineering Times, "Intel fixes a Pentium FPU glitch" by Alexander Wolfe.[4]

The story was subsequently picked up by CNN in a segment aired on November 21, 1994.[1] This brought it into widespread public prominence.

Publicly, Intel acknowledged the floating-point flaw, but claimed that it was not serious and would not affect most users. Intel offered to replace processors to users who could prove that they were affected. However, although most independent estimates found the bug to be of little importance and would have negligible effect on most users, it caused a great public outcry. Companies like IBM (whose IBM 5x86C microprocessor competed at that time with the Intel Pentium line) joined the condemnation.

On December 20, 1994, Intel offered to replace all flawed Pentium processors on the basis of request, in response to mounting public pressure.[5] Although it turned out that only a small fraction of Pentium owners bothered to get their chips replaced, the financial impact on the company was significant. On January 17, 1995, Intel announced a pre-tax charge of $475 million against earnings, ostensibly the total cost associated with replacement of the flawed processors.[1] Some of the defective chips were later turned into key rings by Intel.[6]

"

Last edited by AT91SAM (2015-12-14 16:24:36)

piwi · 2015-12-14 16:28:08

if you only allow known keys you still test a very limited number of keys....

You can choose random keys and therefore test as many as you want (I said "known keys", not "well known keys"). Its all about showing that the key we are searching is among the remaining few billions. Because we know the key in advance, we can look for the odd/even state combination representing that exact key after shifting in the first byte (xor UID). And this can be done a lot faster without brute force.

use a program that write random key A and B for every sector.
keep the used files that were written on the cards so you can check afterwards!!
Let the hardnested brute force.
then find store time , if key was found, uid , sector , sector started from , etc...
by testing 1000+ of keys... iit's very likely you will find unexpected results...

Yes, you got it. Except that brute force isn't necessary to check if the key would be found. And I wouldn't use a card as intermediate storage - instead feeding hardnested with a subroutine which behaves like a Mifare Plus card nonce generator.

piwi · 2015-12-15 07:42:19

I just pushed a new commit. This now implements

evaluating the bit flip property, which results in a significant decrease of the remaining key space for some keys
fiddled with the minimum required probability and number of acquired nonces. This is still experimental.
the possibility to add the known target key as parameter to hf mf hardnested (in order to test if it is included in the remaining key space)
an estimation how long a brute force would take to recover the key if it would be unknown. Note that this estimation is currently based on my (two years old) laptop and my quick and dirty implementation of the brute force phase without involving a GPU.

I think that I am pretty much done with the code in general. Next steps will be to speed it up and then add an outer loop for tests with random keys.

proxmark3> hf mf hardnested 0 a ffffffffffff 7 b a6b9aa97b955
--target block no:  7, target key type:B, known target key: 0xa6b9aa97b955, file action: none, Slow: No
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1344 nonces ( 1328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 0
Acquired  1568 nonces ( 1546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 0
Acquired  2016 nonces ( 1986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 0
Acquired  2576 nonces ( 2526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 0
Acquired  3024 nonces ( 2957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 0

[...]

Acquired 67088 nonces (41951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 51
Acquired 67536 nonces (42101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 56
Acquired 68096 nonces (42299 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 55
Acquired 68544 nonces (42463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95.0%: 57
Acquired a total of 68992 nonces in 607.1 seconds (6818 nonces/minute)

[...]

Number of remaining possible keys: 26598615944 (2^34.6)
Looking for known target key in remaining key space...
Key Found after testing 6035497796 (2^32.5) out of 26598615944 (2^34.6) keys. A brute force would have taken approx 23 minutes.
proxmark3> exit

AT91SAM · 2015-12-16 04:51:38

Yep it looks it gives some reduction.
But I thing I found a exception that comes back with a 2⁴42
the key is unkown to me so we need to brute force it i am afraid...
I will rerun today/tomorrow... to be sure...
to be sure , just did it very quick.
some other results came back with a 2²20 this was also a unknown hard key.
Ill will post also some results of known keys....
and when I dont enter the known key as known key.

piwi · 2015-12-16 08:20:58

Can you upload your nonces.bin of the 2^42 example to a file share and post the link here? The logs are growing too big for here and I can't use them to debug...

AT91SAM · 2015-12-16 16:53:36

Yes I will ....
Also found a situation that I knew the key 000000000000 and it did not find it!
Do you have PGP?
the card content if private and sending the nouces.bin in the open could be unwise...
Don't mind sending it to you in private.
to improve your research.

[== Undefined ==]
proxmark3> hf mf hardnested 0 a 000000000000 67 b 000000000000  
--target block no: 67, target key type:B, known target key: 0x000000000000, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1568 nonces ( 1553 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2531 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2959 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4032 nonces ( 3917 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4592 nonces ( 4446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5040 nonces ( 4869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5600 nonces ( 5385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6048 nonces ( 5793 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6608 nonces ( 6308 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  7056 nonces ( 6717 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  7504 nonces ( 7120 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  8064 nonces ( 7620 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  8512 nonces ( 8009 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  9072 nonces ( 8491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  9520 nonces ( 8889 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 10080 nonces ( 9374 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 10528 nonces ( 9749 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 11088 nonces (10230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 11536 nonces (10599 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 12096 nonces (11071 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 12544 nonces (11439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 13104 nonces (11884 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 13552 nonces (12251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 14112 nonces (12703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 14560 nonces (13049 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 15008 nonces (13398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 15568 nonces (13832 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 16016 nonces (14185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 16576 nonces (14610 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 17024 nonces (14956 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 17584 nonces (15389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 18032 nonces (15719 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 18592 nonces (16130 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 19040 nonces (16469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 19600 nonces (16873 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 20048 nonces (17209 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 20608 nonces (17618 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 21056 nonces (17939 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 21504 nonces (18246 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 22064 nonces (18647 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 22512 nonces (18960 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 23072 nonces (19369 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 23520 nonces (19692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 24080 nonces (20093 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 24528 nonces (20409 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 25088 nonces (20790 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 25536 nonces (21107 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 26096 nonces (21482 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 26544 nonces (21786 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 27104 nonces (22160 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 27552 nonces (22457 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 28112 nonces (22818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 28560 nonces (23119 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 29008 nonces (23420 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 29568 nonces (23781 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 30016 nonces (24041 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 30576 nonces (24371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 31024 nonces (24643 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 31584 nonces (24986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 32032 nonces (25246 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 32592 nonces (25590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 33040 nonces (25857 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 33600 nonces (26194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 34048 nonces (26466 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 34608 nonces (26795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 35056 nonces (27043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 35504 nonces (27315 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 36064 nonces (27620 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 36512 nonces (27892 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 37072 nonces (28222 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 37520 nonces (28477 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 38080 nonces (28800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 38528 nonces (29047 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 39088 nonces (29372 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 39536 nonces (29628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 40096 nonces (29931 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 40544 nonces (30157 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 41104 nonces (30451 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 41552 nonces (30669 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 42112 nonces (30969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 42560 nonces (31196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 43008 nonces (31423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 43568 nonces (31703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 44016 nonces (31939 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 44576 nonces (32226 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 45024 nonces (32453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 45584 nonces (32734 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 46032 nonces (32947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 46592 nonces (33223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 47040 nonces (33441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 47600 nonces (33725 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 48048 nonces (33946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 48608 nonces (34223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 49056 nonces (34439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 49504 nonces (34661 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 50064 nonces (34924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 50512 nonces (35133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 51072 nonces (35405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 51520 nonces (35618 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 52080 nonces (35861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 52528 nonces (36061 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 53088 nonces (36322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 53536 nonces (36525 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 54096 nonces (36757 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 54544 nonces (36961 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 55104 nonces (37215 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 55552 nonces (37389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 56112 nonces (37637 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 56560 nonces (37816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 57008 nonces (38008 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 57568 nonces (38226 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 58016 nonces (38410 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 58576 nonces (38632 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 59024 nonces (38817 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 59584 nonces (39053 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 60032 nonces (39233 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 60592 nonces (39473 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 61040 nonces (39628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 61600 nonces (39845 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 62048 nonces (40012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 62608 nonces (40223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 63056 nonces (40398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 63504 nonces (40579 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 64064 nonces (40772 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 64512 nonces (40945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 65072 nonces (41154 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 65520 nonces (41310 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 66080 nonces (41535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 66528 nonces (41696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 67088 nonces (41916 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 67536 nonces (42051 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 68096 nonces (42242 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 68544 nonces (42407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 69104 nonces (42607 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 69552 nonces (42759 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 70112 nonces (42951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 70560 nonces (43099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 71008 nonces (43246 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 71568 nonces (43444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 72016 nonces (43604 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 72576 nonces (43791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 73024 nonces (43934 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 73584 nonces (44109 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 74032 nonces (44230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 74592 nonces (44414 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 75040 nonces (44574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 75600 nonces (44737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 76048 nonces (44890 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 76608 nonces (45085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 77056 nonces (45228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 77504 nonces (45364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 78064 nonces (45561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 78512 nonces (45691 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 79072 nonces (45873 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 79520 nonces (46018 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 80080 nonces (46174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 80528 nonces (46301 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 81088 nonces (46440 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 81536 nonces (46540 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 82096 nonces (46688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 82544 nonces (46806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 83104 nonces (46971 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 83552 nonces (47096 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 84112 nonces (47263 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 84560 nonces (47376 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 85008 nonces (47522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 85568 nonces (47687 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 86016 nonces (47818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 86576 nonces (47959 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 87024 nonces (48091 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 87584 nonces (48257 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 88032 nonces (48371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 88592 nonces (48507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 89040 nonces (48619 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 89600 nonces (48746 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 90048 nonces (48851 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 90608 nonces (48997 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 91056 nonces (49115 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 91504 nonces (49214 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 92064 nonces (49364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 92512 nonces (49495 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 29
Acquired 93072 nonces (49625 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 32
Acquired 93520 nonces (49747 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 32
Acquired 94080 nonces (49878 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 32
Acquired 94528 nonces (49991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 34
Acquired 95088 nonces (50119 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 34
Acquired 95536 nonces (50219 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 34
Acquired 96096 nonces (50347 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 33
Acquired 96544 nonces (50455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 33
Acquired 97104 nonces (50574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 34
Acquired 97552 nonces (50666 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 35
Acquired 98112 nonces (50789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 38
Acquired 98560 nonces (50905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 39
Acquired 99008 nonces (50996 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 40
Acquired 99568 nonces (51120 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 41
Acquired 100016 nonces (51220 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 44
Acquired 100576 nonces (51327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 45
Acquired 101024 nonces (51422 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 47
Acquired 101584 nonces (51539 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 52
Acquired 102032 nonces (51637 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 54
Acquired 102592 nonces (51756 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 56
Acquired 103040 nonces (51850 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 59
Acquired 103600 nonces (51966 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 59
Acquired a total of 103936 nonces in 126,1 seconds (49449 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   126756 entries
Partial State List Odd [ 2] has    18386 entries
Partial State List Odd [ 4] has    74240 entries
Partial State List Odd [ 6] has   181736 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   182032 entries
Partial State List Odd [12] has    73420 entries
Partial State List Odd [14] has    17606 entries
Partial State List Odd [16] has   125600 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 0
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xd4:
Sum(a8) = 0
odd_state =  0xfffffc
even_state = 0xfffff5
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 120
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0xd4:
Sum(a8) = 96
odd_state =  0x3bb337
even_state = 0x8084cd
Tests: for key = 0xa6b9aa97b955:
Sum(a0) = 128
odd_state =  0xb7f970
even_state = 0x4a0eaf
After adding best first byte 0xd4:
Sum(a8) = 128
odd_state =  0x7f9707
even_state = 0xa0eaf8

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[00]:   [01]: e [02]:   [03]:   [04]: e [05]:   [06]:   [07]:o  
[08]:   [09]: e [0a]:   [0b]:   [0c]: e [0d]:o  [0e]:o  [0f]:   
[10]:   [11]:   [12]:   [13]: e [14]:o  [15]:   [16]: e [17]:o  
[18]:   [19]:   [1a]:   [1b]: e [1c]:   [1d]:o  [1e]: e [1f]:   
[20]:o  [21]: e [22]:   [23]:o  [24]:o  [25]:   [26]:   [27]:   
[28]:   [29]:o  [2a]:o  [2b]:   [2c]: e [2d]:   [2e]:   [2f]:   
[30]:o  [31]:   [32]:   [33]:o  [34]:   [35]:   [36]: e [37]:   
[38]:   [39]:o  [3a]:o  [3b]: e [3c]:   [3d]:   [3e]:o  [3f]:   
[40]:   [41]: e [42]:   [43]:   [44]: e [45]:   [46]:   [47]:o  
[48]:   [49]: e [4a]:   [4b]:   [4c]: e [4d]:o  [4e]:o  [4f]:   
[50]:   [51]:   [52]:   [53]: e [54]:o  [55]:   [56]: e [57]:o  
[58]:   [59]:   [5a]:   [5b]: e [5c]:   [5d]:o  [5e]: e [5f]:   
[60]:o  [61]: e [62]:   [63]:o  [64]:o  [65]:   [66]:   [67]:   
[68]:   [69]:o  [6a]:o  [6b]:   [6c]: e [6d]:   [6e]:   [6f]:   
[70]:o  [71]:   [72]:   [73]:o  [74]:   [75]:   [76]: e [77]:   
[78]:   [79]:o  [7a]:o  [7b]: e [7c]:   [7d]:   [7e]:o  [7f]:   
[80]:   [81]: e [82]:   [83]:   [84]: e [85]:   [86]:   [87]:o  
[88]:   [89]: e [8a]:   [8b]:   [8c]: e [8d]:o  [8e]:o  [8f]:   
[90]:   [91]:   [92]:   [93]: e [94]:o  [95]:   [96]: e [97]:o  
[98]:   [99]:   [9a]:   [9b]: e [9c]:   [9d]:o  [9e]: e [9f]:   
[a0]:o  [a1]: e [a2]:   [a3]:o  [a4]:o  [a5]:   [a6]:   [a7]:   
[a8]:   [a9]:o  [aa]:o  [ab]:   [ac]: e [ad]:   [ae]:   [af]:   
[b0]:o  [b1]:   [b2]:   [b3]:o  [b4]:   [b5]:   [b6]: e [b7]:   
[b8]:   [b9]:o  [ba]:o  [bb]: e [bc]:   [bd]:   [be]:o  [bf]:   
[c0]:   [c1]: e [c2]:   [c3]:   [c4]: e [c5]:   [c6]:   [c7]:o  
[c8]:   [c9]: e [ca]:   [cb]:   [cc]: e [cd]:o  [ce]:o  [cf]:   
[d0]:   [d1]:   [d2]:   [d3]: e [d4]:o  [d5]:   [d6]: e [d7]:o  
[d8]:   [d9]:   [da]:   [db]: e [dc]:   [dd]:o  [de]: e [df]:   
[e0]:o  [e1]: e [e2]:   [e3]:o  [e4]:o  [e5]:   [e6]:   [e7]:   
[e8]:   [e9]:o  [ea]:o  [eb]:   [ec]: e [ed]:   [ee]:   [ef]:   
[f0]:o  [f1]:   [f2]:   [f3]:o  [f4]:   [f5]:   [f6]: e [f7]:   
[f8]:   [f9]:o  [fa]:o  [fb]: e [fc]:   [fd]:   [fe]:o  [ff]:   

Tests: Best 256 first bytes:
#000 Byte: d4, n = 209, k = 26, Sum(a8):  32, Confidence: 100,0%
#001 Byte: d3, n = 208, k = 180, Sum(a8): 224, Confidence: 100,0%
#002 Byte: 2e, n = 207, k = 207, Sum(a8): 256, Confidence: 100,0%
#003 Byte: 46, n = 209, k = 158, Sum(a8): 192, Confidence: 99,8%
#004 Byte: 67, n = 206, k = 73, Sum(a8):  96, Confidence: 99,8%
#005 Byte: 1a, n = 210, k = 51, Sum(a8):  64, Confidence: 99,7%
#006 Byte: 08, n = 203, k = 73, Sum(a8):  96, Confidence: 99,7%
#007 Byte: bc, n = 201, k = 129, Sum(a8): 160, Confidence: 99,6%
#008 Byte: 4f, n = 210, k = 77, Sum(a8):  96, Confidence: 99,6%
#009 Byte: 03, n = 198, k = 70, Sum(a8):  96, Confidence: 99,4%
#010 Byte: b7, n = 204, k = 75, Sum(a8):  96, Confidence: 99,3%
#011 Byte: 27, n = 209, k = 50, Sum(a8):  64, Confidence: 99,3%
#012 Byte: 13, n = 197, k = 69, Sum(a8):  96, Confidence: 98,9%
#013 Byte: 1c, n = 190, k = 67, Sum(a8):  96, Confidence: 98,9%
#014 Byte: 66, n = 213, k = 133, Sum(a8): 160, Confidence: 98,9%
#015 Byte: e6, n = 198, k = 73, Sum(a8):  96, Confidence: 98,9%
#016 Byte: 54, n = 200, k = 74, Sum(a8):  96, Confidence: 98,9%
#017 Byte: 4e, n = 201, k = 126, Sum(a8): 160, Confidence: 98,4%
#018 Byte: f7, n = 203, k = 127, Sum(a8): 160, Confidence: 98,4%
#019 Byte: 35, n = 205, k = 77, Sum(a8):  96, Confidence: 98,3%
#020 Byte: 5a, n = 211, k = 131, Sum(a8): 160, Confidence: 97,9%
#021 Byte: c1, n = 197, k = 123, Sum(a8): 160, Confidence: 97,6%
#022 Byte: 89, n = 197, k = 74, Sum(a8):  96, Confidence: 97,6%
#023 Byte: 9e, n = 199, k = 75, Sum(a8):  96, Confidence: 97,4%
#024 Byte: 3c, n = 211, k = 162, Sum(a8): 192, Confidence: 97,2%
#025 Byte: 45, n = 214, k = 108, Sum(a8): 128, Confidence: 97,1%
#026 Byte: 30, n = 209, k = 104, Sum(a8): 128, Confidence: 96,8%
#027 Byte: 2d, n = 208, k = 104, Sum(a8): 128, Confidence: 96,8%
#028 Byte: 2b, n = 208, k = 104, Sum(a8): 128, Confidence: 96,8%
#029 Byte: 84, n = 212, k = 105, Sum(a8): 128, Confidence: 96,8%
#030 Byte: 9c, n = 205, k = 127, Sum(a8): 160, Confidence: 96,8%
#031 Byte: ca, n = 207, k = 104, Sum(a8): 128, Confidence: 96,4%
#032 Byte: 34, n = 206, k = 103, Sum(a8): 128, Confidence: 96,4%
#033 Byte: 96, n = 210, k = 104, Sum(a8): 128, Confidence: 96,4%
#034 Byte: 74, n = 200, k = 76, Sum(a8):  96, Confidence: 96,4%
#035 Byte: e3, n = 204, k = 102, Sum(a8): 128, Confidence: 96,1%
#036 Byte: bd, n = 205, k = 102, Sum(a8): 128, Confidence: 96,1%
#037 Byte: ba, n = 204, k = 102, Sum(a8): 128, Confidence: 96,1%
#038 Byte: 86, n = 205, k = 102, Sum(a8): 128, Confidence: 96,1%
#039 Byte: 14, n = 205, k = 103, Sum(a8): 128, Confidence: 96,1%
#040 Byte: dc, n = 208, k = 105, Sum(a8): 128, Confidence: 96,1%
#041 Byte: c9, n = 208, k = 103, Sum(a8): 128, Confidence: 96,1%
#042 Byte: c7, n = 208, k = 103, Sum(a8): 128, Confidence: 96,1%
#043 Byte: 51, n = 208, k = 103, Sum(a8): 128, Confidence: 96,1%
#044 Byte: 53, n = 213, k = 105, Sum(a8): 128, Confidence: 96,0%
#045 Byte: d9, n = 203, k = 102, Sum(a8): 128, Confidence: 95,7%
#046 Byte: 3e, n = 203, k = 102, Sum(a8): 128, Confidence: 95,7%
#047 Byte: cb, n = 206, k = 102, Sum(a8): 128, Confidence: 95,7%
#048 Byte: 17, n = 206, k = 102, Sum(a8): 128, Confidence: 95,7%
#049 Byte: ce, n = 211, k = 104, Sum(a8): 128, Confidence: 95,7%
#050 Byte: 81, n = 211, k = 104, Sum(a8): 128, Confidence: 95,7%
#051 Byte: 5c, n = 211, k = 104, Sum(a8): 128, Confidence: 95,7%
#052 Byte: 19, n = 218, k = 107, Sum(a8): 128, Confidence: 95,6%
#053 Byte: 29, n = 209, k = 48, Sum(a8):  64, Confidence: 95,6%
#054 Byte: aa, n = 201, k = 101, Sum(a8): 128, Confidence: 95,3%
#055 Byte: a3, n = 201, k = 100, Sum(a8): 128, Confidence: 95,3%
#056 Byte: 44, n = 201, k = 101, Sum(a8): 128, Confidence: 95,3%
#057 Byte: 57, n = 204, k = 101, Sum(a8): 128, Confidence: 95,3%
#058 Byte: 37, n = 204, k = 101, Sum(a8): 128, Confidence: 95,3%
#059 Byte: 0b, n = 204, k = 101, Sum(a8): 128, Confidence: 95,3%
#060 Byte: fd, n = 199, k = 99, Sum(a8): 128, Confidence: 95,0%
#061 Byte: 36, n = 199, k = 99, Sum(a8): 128, Confidence: 95,0%
#062 Byte: ee, n = 202, k = 102, Sum(a8): 128, Confidence: 95,0%
#063 Byte: 6e, n = 202, k = 100, Sum(a8): 128, Confidence: 95,0%
#064 Byte: 5f, n = 202, k = 102, Sum(a8): 128, Confidence: 95,0%
#065 Byte: 91, n = 207, k = 102, Sum(a8): 128, Confidence: 94,9%
#066 Byte: b9, n = 196, k = 98, Sum(a8): 128, Confidence: 94,6%
#067 Byte: f4, n = 200, k = 99, Sum(a8): 128, Confidence: 94,6%
#068 Byte: 39, n = 200, k = 101, Sum(a8): 128, Confidence: 94,6%
#069 Byte: 90, n = 205, k = 104, Sum(a8): 128, Confidence: 94,6%
#070 Byte: 33, n = 194, k = 97, Sum(a8): 128, Confidence: 94,2%
#071 Byte: 77, n = 198, k = 98, Sum(a8): 128, Confidence: 94,2%
#072 Byte: ae, n = 203, k = 100, Sum(a8): 128, Confidence: 94,2%
#073 Byte: 99, n = 210, k = 107, Sum(a8): 128, Confidence: 94,0%
#074 Byte: 7e, n = 210, k = 107, Sum(a8): 128, Confidence: 94,0%
#075 Byte: d1, n = 196, k = 97, Sum(a8): 128, Confidence: 93,9%
#076 Byte: 76, n = 201, k = 102, Sum(a8): 128, Confidence: 93,8%
#077 Byte: dd, n = 200, k = 136, Sum(a8): 176, Confidence: 93,7%
#078 Byte: 1f, n = 191, k = 96, Sum(a8): 128, Confidence: 93,5%
#079 Byte: f3, n = 199, k = 101, Sum(a8): 128, Confidence: 93,4%
#080 Byte: 94, n = 199, k = 98, Sum(a8): 128, Confidence: 93,4%
#081 Byte: da, n = 206, k = 105, Sum(a8): 128, Confidence: 93,3%
#082 Byte: 8a, n = 206, k = 105, Sum(a8): 128, Confidence: 93,3%
#083 Byte: 24, n = 206, k = 105, Sum(a8): 128, Confidence: 93,3%
#084 Byte: 8b, n = 204, k = 100, Sum(a8): 128, Confidence: 92,9%
#085 Byte: 4c, n = 185, k = 93, Sum(a8): 128, Confidence: 92,4%
#086 Byte: 83, n = 198, k = 101, Sum(a8): 128, Confidence: 91,8%
#087 Byte: c5, n = 196, k = 96, Sum(a8): 128, Confidence: 91,5%
#088 Byte: 2a, n = 196, k = 96, Sum(a8): 128, Confidence: 91,5%
#089 Byte: 2c, n = 194, k = 95, Sum(a8): 128, Confidence: 91,1%
#090 Byte: 26, n = 194, k = 95, Sum(a8): 128, Confidence: 91,1%
#091 Byte: d7, n = 205, k = 100, Sum(a8): 128, Confidence: 91,1%
#092 Byte: c0, n = 205, k = 105, Sum(a8): 128, Confidence: 91,1%
#093 Byte: 0a, n = 196, k = 76, Sum(a8):  96, Confidence: 90,8%
#094 Byte: c3, n = 203, k = 99, Sum(a8): 128, Confidence: 90,7%
#095 Byte: 31, n = 203, k = 104, Sum(a8): 128, Confidence: 90,7%
#096 Byte: de, n = 190, k = 93, Sum(a8): 128, Confidence: 90,4%
#097 Byte: c2, n = 201, k = 103, Sum(a8): 128, Confidence: 90,4%
#098 Byte: 16, n = 199, k = 102, Sum(a8): 128, Confidence: 90,0%
#099 Byte: 6c, n = 214, k = 110, Sum(a8): 128, Confidence: 89,9%
#100 Byte: 09, n = 197, k = 101, Sum(a8): 128, Confidence: 89,7%
#101 Byte: fc, n = 212, k = 109, Sum(a8): 128, Confidence: 89,5%
#102 Byte: e2, n = 212, k = 109, Sum(a8): 128, Confidence: 89,5%
#103 Byte: bb, n = 206, k = 139, Sum(a8): 176, Confidence: 89,1%
#104 Byte: 52, n = 210, k = 90, Sum(a8): 112, Confidence: 88,8%
#105 Byte: 7a, n = 208, k = 90, Sum(a8): 112, Confidence: 88,7%
#106 Byte: 72, n = 200, k = 78, Sum(a8):  96, Confidence: 88,7%
#107 Byte: 4d, n = 195, k = 119, Sum(a8): 160, Confidence: 88,5%
#108 Byte: fa, n = 204, k = 99, Sum(a8): 128, Confidence: 88,2%
#109 Byte: e5, n = 209, k = 118, Sum(a8): 144, Confidence: 88,2%
#110 Byte: 0f, n = 209, k = 91, Sum(a8): 112, Confidence: 88,2%
#111 Byte: 7c, n = 202, k = 104, Sum(a8): 128, Confidence: 87,9%
#112 Byte: 71, n = 202, k = 98, Sum(a8): 128, Confidence: 87,9%
#113 Byte: 43, n = 202, k = 104, Sum(a8): 128, Confidence: 87,9%
#114 Byte: 2f, n = 200, k = 97, Sum(a8): 128, Confidence: 87,6%
#115 Byte: 21, n = 200, k = 103, Sum(a8): 128, Confidence: 87,6%
#116 Byte: e7, n = 196, k = 101, Sum(a8): 128, Confidence: 87,0%
#117 Byte: a6, n = 194, k = 94, Sum(a8): 128, Confidence: 86,7%
#118 Byte: ef, n = 205, k = 117, Sum(a8): 144, Confidence: 86,6%
#119 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#120 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#121 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#122 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#123 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#124 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#125 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#126 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#127 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#128 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#129 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#130 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#131 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#132 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#133 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#134 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#135 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#136 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#137 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#138 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#139 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#140 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#141 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#142 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#143 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#144 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#145 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#146 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#147 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#148 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#149 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#150 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#151 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#152 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#153 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#154 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#155 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#156 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#157 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#158 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#159 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#160 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#161 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#162 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#163 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#164 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#165 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#166 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#167 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#168 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#169 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#170 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#171 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#172 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#173 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#174 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#175 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#176 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#177 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#178 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#179 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#180 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#181 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#182 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#183 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#184 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#185 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#186 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#187 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#188 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#189 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#190 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#191 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#192 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#193 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#194 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#195 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#196 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#197 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#198 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#199 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#200 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#201 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#202 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#203 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#204 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#205 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#206 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#207 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#208 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#209 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#210 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#211 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#212 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#213 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#214 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#215 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#216 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#217 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#218 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#219 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#220 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#221 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#222 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#223 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#224 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#225 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#226 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#227 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#228 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#229 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#230 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#231 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#232 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#233 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#234 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#235 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#236 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#237 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#238 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#239 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#240 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#241 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#242 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#243 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#244 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#245 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#246 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#247 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#248 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#249 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#250 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#251 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#252 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#253 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#254 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
#255 Byte: 00, n = 188, k = 91, Sum(a8): 128, Confidence: 85,8%
          
Sum(a0) = 136          
Number of first bytes with confidence > 95,0%: 60          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 136: 16937635385344 (2^43,9)
Reducing Partial Statelists (p,q) = (6,10) with lengths 181736, 185062
Odd state candidates: 5651 (2^12,5)
Even state candidates: 0 (2^-inf)
Odd state candidates: 900 (2^9,8)
Even state candidates: 20266 (2^14,3)
Odd state candidates: 1104 (2^10,1)
Even state candidates: 21604 (2^14,4)
Odd state candidates: 5016 (2^12,3)
Even state candidates: 0 (2^-inf)
Reducing Partial Statelists (p,q) = (10,6) with lengths 182032, 178706
Odd state candidates: 5729 (2^12,5)
Even state candidates: 0 (2^-inf)
Odd state candidates: 822 (2^9,7)
Even state candidates: 18690 (2^14,2)
Odd state candidates: 1160 (2^10,2)
Even state candidates: 19232 (2^14,2)
Odd state candidates: 5012 (2^12,3)
Even state candidates: 0 (2^-inf)
Number of remaining possible keys: 79762516 (2^26,2)
Looking for known target key in remaining key space...          
Key NOT found!

proxmark3> hf mf rdbl 67 B 000000000000
--block no:67, key type:B, key:00 00 00 00 00 00            
#db# READ BLOCK FINISHED                 
isOk:01 data:00 00 00 00 00 00 07 87 8f 00 00 00 00 00 00 00

Last edited by AT91SAM (2015-12-16 17:03:15)

AT91SAM · 2015-12-17 02:22:09

@piwi you can reach me if you give me a email adress , Or I can also post my pub key in a reply here.
then you repy with a pgp encryted message here , that I then can open and find your email address.
and your public key so I can reply.

piwi · 2015-12-17 08:43:53

Never tried this way but your proposal seems to be feasible. Awaiting your publick key.

AT91SAM · 2015-12-17 15:15:16

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=Cd2j
-----END PGP PUBLIC KEY BLOCK-----

Import this key...

control-c / cntrl -v dump it in file then...

gpg --import key.asc

How to make your own gpg key.
gpg --gen-key

how to export you newly made public key.
gpg --armor --output alice.gpg --export alice@cyb.org

how to encrypt your message tot get a pgp/gpg text file...

cat textfile.txt | gpg --encrypt --armor > cryptedfile.gpg
just enter the correct email adres when asked , end say yes.. when asked...

Decrypting message
gpg -d > file
or gpg -d
then the text will be dumped on the screen....
and offcourse it will ask for a pass phrase..

I use linux to get the binary most of the time its something like apt-get install gpg...
questions? let me know....
It could be a good idea to post your pub key here under PIWI , so nobody can say he is you while mailing....

Last edited by AT91SAM (2015-12-17 15:21:52)

AT91SAM · 2015-12-18 13:59:25

@piwi any questions??? all info needed to reply is in the key I posted

piwi · 2015-12-18 18:15:05

No questions. Just AFK.

AT91SAM · 2015-12-19 12:51:46

Ok mery x-mas!

Last edited by AT91SAM (2015-12-19 12:52:02)

piwi · 2015-12-20 19:11:47

For AT91SAM's eyes only...

piwi · 2015-12-21 17:36:20

ROTFL

AT91SAM · 2015-12-22 03:19:36

@piwi message send

@NSA greetings from Snowden Ed snowden GPG for journalists

Last edited by AT91SAM (2015-12-22 03:50:52)

piwi · 2015-12-24 15:44:39

Pushed my Christmas Commit.

This is mainly a tune for speed with some minor other fixes.

@AT91SAM: you should now be able to find the known key 000000000000 for your example. However, the block 91 of the same card is quite weird: there are only 5 different first bytes in your nonces - but in this case the acquisition shouldn't complete. Maybe I have a bug in the nonce acquisition. Or your build is not correct. Your output still shows unrealistic timing:

Acquired a total of 112336 nonces in 128,6 seconds (52421 nonces/minute)

I will now go for massive tests with lots of random keys and do some statistics...

Merry Christmas.

AT91SAM · 2015-12-26 15:43:13

piwi wrote:

Pushed my Christmas Commit.
This is mainly a tune for speed with some minor other fixes.
@AT91SAM: you should now be able to find the known key 000000000000 for your example. However, the block 91 of the same card is quite weird: there are only 5 different first bytes in your nonces - but in this case the acquisition shouldn't complete. Maybe I have a bug in the nonce acquisition. Or your build is not correct. Your output still shows unrealistic timing:
Acquired a total of 112336 nonces in 128,6 seconds (52421 nonces/minute)
I will now go for massive tests with lots of random keys and do some statistics...
Merry Christmas.

I always heva the latest build.... download it from zip replacing everything when not sure.
I think its something with the card.
Gould be a exploitable bug in the card?
but afk rest of day
test christmas commit later!
merry chrismas!

Last edited by AT91SAM (2015-12-26 16:12:14)

AT91SAM · 2015-12-28 01:56:27

@piwi ....
same results....
sorry , I send you the zip I downloaded from github.
I dont trust github 100% so this i s why I send you the zip
so you can see I used the latest version....
I send you a we transfer link.
looks like a intresting situation
sugestion make version quote in log so we can all see its the lastst commit.

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 61 B 000000000000 
--target block no: 61, target key type:B, known target key: 0x000000000000, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Checking for Filter Flip Properties...
Acquired  1792 nonces ( 1769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2533 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2963 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4032 nonces ( 3911 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4592 nonces ( 4435 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5040 nonces ( 4855 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  5600 nonces ( 5378 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  6048 nonces ( 5788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  6608 nonces ( 6294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  7056 nonces ( 6695 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  7504 nonces ( 7100 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  8064 nonces ( 7595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  8512 nonces ( 7991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired  9072 nonces ( 8487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  9520 nonces ( 8870 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 10080 nonces ( 9338 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 10528 nonces ( 9714 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 11088 nonces (10188 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 11536 nonces (10559 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 12096 nonces (11029 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 12544 nonces (11402 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 13104 nonces (11857 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 13552 nonces (12212 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 14112 nonces (12655 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 14560 nonces (13026 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 15008 nonces (13384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 15568 nonces (13813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 16016 nonces (14180 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 16576 nonces (14637 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 17024 nonces (14992 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 17584 nonces (15430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 18032 nonces (15775 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 18592 nonces (16177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 19040 nonces (16513 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 19600 nonces (16938 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 20048 nonces (17254 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 20608 nonces (17680 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 21056 nonces (17995 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 21504 nonces (18331 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 22064 nonces (18732 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 22512 nonces (19047 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 23072 nonces (19449 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 23520 nonces (19757 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 24080 nonces (20150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 24528 nonces (20473 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 25088 nonces (20864 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 25536 nonces (21169 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 26096 nonces (21550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 26544 nonces (21842 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 27104 nonces (22234 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 27552 nonces (22544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 28112 nonces (22915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 28560 nonces (23200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 29008 nonces (23487 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 29568 nonces (23842 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 30016 nonces (24114 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 30576 nonces (24469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 31024 nonces (24743 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 31584 nonces (25082 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 32032 nonces (25352 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 32592 nonces (25697 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 33040 nonces (25970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 33600 nonces (26312 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 34048 nonces (26593 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 34608 nonces (26930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 35056 nonces (27196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 35504 nonces (27463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 36064 nonces (27785 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 36512 nonces (28027 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 37072 nonces (28373 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 37520 nonces (28630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 38080 nonces (28945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 38528 nonces (29185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 39088 nonces (29486 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 39536 nonces (29729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 40096 nonces (30041 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 40544 nonces (30299 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 41104 nonces (30608 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 41552 nonces (30855 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 42112 nonces (31154 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 42560 nonces (31390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 43008 nonces (31630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 43568 nonces (31904 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 44016 nonces (32125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 44576 nonces (32408 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 45024 nonces (32628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 45584 nonces (32915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 46032 nonces (33149 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 46592 nonces (33418 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 47040 nonces (33644 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 47600 nonces (33913 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 48048 nonces (34132 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 48608 nonces (34416 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 49056 nonces (34631 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 49504 nonces (34844 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 50064 nonces (35118 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 50512 nonces (35329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 51072 nonces (35586 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 51520 nonces (35806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 52080 nonces (36087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 52528 nonces (36297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 53088 nonces (36544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 53536 nonces (36729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 54096 nonces (36966 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 54544 nonces (37160 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 55104 nonces (37419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 55552 nonces (37612 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 56112 nonces (37872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 56560 nonces (38073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 57008 nonces (38277 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 57568 nonces (38507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 58016 nonces (38682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 58576 nonces (38908 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 59024 nonces (39084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 59584 nonces (39281 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 60032 nonces (39444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 60592 nonces (39663 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 61040 nonces (39833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 61600 nonces (40054 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 62048 nonces (40237 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 62608 nonces (40443 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 63056 nonces (40602 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 63504 nonces (40747 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 64064 nonces (40959 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 64512 nonces (41113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 65072 nonces (41329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 65520 nonces (41498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 66080 nonces (41713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 66528 nonces (41875 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 67088 nonces (42073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 67536 nonces (42228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 68096 nonces (42431 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 68544 nonces (42572 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 69104 nonces (42761 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 69552 nonces (42927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 70112 nonces (43105 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 70560 nonces (43251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 71008 nonces (43384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 71568 nonces (43559 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 72016 nonces (43712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 72576 nonces (43886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 73024 nonces (44040 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 73584 nonces (44225 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 74032 nonces (44365 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired a total of 74480 nonces in 109,5 seconds (40804 nonces/minute)          
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   126756 entries
Partial State List Odd [ 2] has    18386 entries
Partial State List Odd [ 4] has    74240 entries
Partial State List Odd [ 6] has   181736 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   182032 entries
Partial State List Odd [12] has    73420 entries
Partial State List Odd [14] has    17606 entries
Partial State List Odd [16] has   125600 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 0
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xd4:
Sum(a8) = 0
odd_state =  0xfffffc
even_state = 0xfffff5
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 120
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0xd4:
Sum(a8) = 96
odd_state =  0x3bb337
even_state = 0x8084cd
Tests: for key = 0xa6b9aa97b955:
Sum(a0) = 128
odd_state =  0xb7f970
even_state = 0x4a0eaf
After adding best first byte 0xd4:
Sum(a8) = 128
odd_state =  0x7f9707
even_state = 0xa0eaf8

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[00]:   [01]: e [02]:   [03]:   [04]: e [05]:   [06]:   [07]:o  
[08]:   [09]: e [0a]:   [0b]:   [0c]: e [0d]:o  [0e]:o  [0f]:   
[10]:   [11]:   [12]:   [13]: e [14]:o  [15]:   [16]: e [17]:o  
[18]:   [19]:   [1a]:   [1b]: e [1c]:   [1d]:o  [1e]: e [1f]:   
[20]:o  [21]: e [22]:   [23]:o  [24]:o  [25]:   [26]:   [27]:   
[28]:   [29]:o  [2a]:o  [2b]:   [2c]: e [2d]:   [2e]:   [2f]:   
[30]:o  [31]:   [32]:   [33]:o  [34]:   [35]:   [36]: e [37]:   
[38]:   [39]:o  [3a]:o  [3b]: e [3c]:   [3d]:   [3e]:o  [3f]:   
[40]:   [41]: e [42]:   [43]:   [44]: e [45]:   [46]:   [47]:o  
[48]:   [49]: e [4a]:   [4b]:   [4c]: e [4d]:o  [4e]:o  [4f]:   
[50]:   [51]:   [52]:   [53]: e [54]:o  [55]:   [56]: e [57]:o  
[58]:   [59]:   [5a]:   [5b]: e [5c]:   [5d]:o  [5e]: e [5f]:   
[60]:o  [61]: e [62]:   [63]:o  [64]:o  [65]:   [66]:   [67]:   
[68]:   [69]:o  [6a]:o  [6b]:   [6c]: e [6d]:   [6e]:   [6f]:   
[70]:o  [71]:   [72]:   [73]:o  [74]:   [75]:   [76]: e [77]:   
[78]:   [79]:o  [7a]:o  [7b]: e [7c]:   [7d]:   [7e]:o  [7f]:   
[80]:   [81]: e [82]:   [83]:   [84]: e [85]:   [86]:   [87]:o  
[88]:   [89]: e [8a]:   [8b]:   [8c]: e [8d]:o  [8e]:o  [8f]:   
[90]:   [91]:   [92]:   [93]: e [94]:o  [95]:   [96]: e [97]:o  
[98]:   [99]:   [9a]:   [9b]: e [9c]:   [9d]:o  [9e]: e [9f]:   
[a0]:o  [a1]: e [a2]:   [a3]:o  [a4]:o  [a5]:   [a6]:   [a7]:   
[a8]:   [a9]:o  [aa]:o  [ab]:   [ac]: e [ad]:   [ae]:   [af]:   
[b0]:o  [b1]:   [b2]:   [b3]:o  [b4]:   [b5]:   [b6]: e [b7]:   
[b8]:   [b9]:o  [ba]:o  [bb]: e [bc]:   [bd]:   [be]:o  [bf]:   
[c0]:   [c1]: e [c2]:   [c3]:   [c4]: e [c5]:   [c6]:   [c7]:o  
[c8]:   [c9]: e [ca]:   [cb]:   [cc]: e [cd]:o  [ce]:o  [cf]:   
[d0]:   [d1]:   [d2]:   [d3]: e [d4]:o  [d5]:   [d6]: e [d7]:o  
[d8]:   [d9]:   [da]:   [db]: e [dc]:   [dd]:o  [de]: e [df]:   
[e0]:o  [e1]: e [e2]:   [e3]:o  [e4]:o  [e5]:   [e6]:   [e7]:   
[e8]:   [e9]:o  [ea]:o  [eb]:   [ec]: e [ed]:   [ee]:   [ef]:   
[f0]:o  [f1]:   [f2]:   [f3]:o  [f4]:   [f5]:   [f6]: e [f7]:   
[f8]:   [f9]:o  [fa]:o  [fb]: e [fc]:   [fd]:   [fe]:o  [ff]:   

Tests: Best 256 first bytes:
#000 Byte: d4, n = 190, k = 23, Sum(a8):  32, Confidence: 100,0%, Bitflip: o 
#001 Byte: d3, n = 185, k = 162, Sum(a8): 224, Confidence: 100,0%, Bitflip:  e
#002 Byte: 2e, n = 188, k = 188, Sum(a8): 256, Confidence: 100,0%, Bitflip:   
#003 Byte: 46, n = 187, k = 139, Sum(a8): 192, Confidence: 99,8%, Bitflip:   
#004 Byte: 27, n = 180, k = 46, Sum(a8):  64, Confidence: 99,7%, Bitflip:   
#005 Byte: 1a, n = 179, k = 46, Sum(a8):  64, Confidence: 99,6%, Bitflip:   
#006 Byte: 3c, n = 177, k = 132, Sum(a8): 192, Confidence: 99,6%, Bitflip:   
#007 Byte: 29, n = 161, k = 39, Sum(a8):  64, Confidence: 98,9%, Bitflip: o 
#008 Byte: 9c, n = 180, k = 115, Sum(a8): 160, Confidence: 98,5%, Bitflip:   
#009 Byte: 0a, n = 176, k = 62, Sum(a8):  96, Confidence: 97,9%, Bitflip:   
#010 Byte: 03, n = 178, k = 65, Sum(a8):  96, Confidence: 97,9%, Bitflip:   
#011 Byte: 67, n = 184, k = 68, Sum(a8):  96, Confidence: 97,7%, Bitflip:   
#012 Byte: 4e, n = 170, k = 110, Sum(a8): 160, Confidence: 97,6%, Bitflip: o 
#013 Byte: 1c, n = 174, k = 61, Sum(a8):  96, Confidence: 97,5%, Bitflip:   
#014 Byte: 66, n = 176, k = 111, Sum(a8): 160, Confidence: 97,0%, Bitflip:   
#015 Byte: 89, n = 173, k = 64, Sum(a8):  96, Confidence: 96,6%, Bitflip:  e
#016 Byte: 1b, n = 173, k = 64, Sum(a8):  96, Confidence: 96,6%, Bitflip:  e
#017 Byte: bc, n = 191, k = 119, Sum(a8): 160, Confidence: 96,6%, Bitflip:   
#018 Byte: dd, n = 172, k = 125, Sum(a8): 192, Confidence: 95,9%, Bitflip: o 
#019 Byte: 64, n = 160, k = 101, Sum(a8): 160, Confidence: 95,3%, Bitflip: o 
#020 Byte: 54, n = 182, k = 69, Sum(a8):  96, Confidence: 94,7%, Bitflip: o 
#021 Byte: b7, n = 175, k = 66, Sum(a8):  96, Confidence: 94,6%, Bitflip:   
#022 Byte: 72, n = 166, k = 57, Sum(a8):  96, Confidence: 94,3%, Bitflip:   
#023 Byte: b3, n = 183, k = 113, Sum(a8): 160, Confidence: 93,0%, Bitflip: o 
#024 Byte: 5c, n = 187, k = 93, Sum(a8): 128, Confidence: 92,8%, Bitflip:   
#025 Byte: c6, n = 178, k = 68, Sum(a8):  96, Confidence: 92,6%, Bitflip:   
#026 Byte: a7, n = 185, k = 92, Sum(a8): 128, Confidence: 92,4%, Bitflip:   
#027 Byte: 43, n = 184, k = 92, Sum(a8): 128, Confidence: 92,4%, Bitflip:   
#028 Byte: 87, n = 180, k = 90, Sum(a8): 128, Confidence: 91,7%, Bitflip: o 
#029 Byte: 6c, n = 181, k = 91, Sum(a8): 128, Confidence: 91,7%, Bitflip:  e
#030 Byte: 14, n = 180, k = 90, Sum(a8): 128, Confidence: 91,7%, Bitflip: o 
#031 Byte: e7, n = 184, k = 91, Sum(a8): 128, Confidence: 91,7%, Bitflip:   
#032 Byte: 3a, n = 178, k = 89, Sum(a8): 128, Confidence: 91,3%, Bitflip: o 
#033 Byte: 36, n = 182, k = 90, Sum(a8): 128, Confidence: 91,3%, Bitflip:  e
#034 Byte: cc, n = 176, k = 88, Sum(a8): 128, Confidence: 91,0%, Bitflip:  e
#035 Byte: 3b, n = 184, k = 71, Sum(a8):  96, Confidence: 90,8%, Bitflip:  e
#036 Byte: 2c, n = 175, k = 88, Sum(a8): 128, Confidence: 90,6%, Bitflip:  e
#037 Byte: 17, n = 175, k = 88, Sum(a8): 128, Confidence: 90,6%, Bitflip: o 
#038 Byte: 19, n = 178, k = 90, Sum(a8): 128, Confidence: 90,6%, Bitflip:   
#039 Byte: 2d, n = 173, k = 86, Sum(a8): 128, Confidence: 90,3%, Bitflip:   
#040 Byte: ee, n = 188, k = 92, Sum(a8): 128, Confidence: 90,1%, Bitflip:   
#041 Byte: ec, n = 168, k = 84, Sum(a8): 128, Confidence: 89,6%, Bitflip:  e
#042 Byte: da, n = 169, k = 85, Sum(a8): 128, Confidence: 89,6%, Bitflip:   
#043 Byte: ca, n = 169, k = 84, Sum(a8): 128, Confidence: 89,6%, Bitflip:   
#044 Byte: 96, n = 168, k = 84, Sum(a8): 128, Confidence: 89,6%, Bitflip:  e
#045 Byte: c9, n = 177, k = 87, Sum(a8): 128, Confidence: 89,5%, Bitflip:  e
#046 Byte: ab, n = 177, k = 90, Sum(a8): 128, Confidence: 89,5%, Bitflip:   
#047 Byte: d5, n = 184, k = 90, Sum(a8): 128, Confidence: 89,4%, Bitflip:   
#048 Byte: 59, n = 184, k = 90, Sum(a8): 128, Confidence: 89,4%, Bitflip:   
#049 Byte: 3e, n = 184, k = 94, Sum(a8): 128, Confidence: 89,4%, Bitflip: o 
#050 Byte: 7f, n = 167, k = 84, Sum(a8): 128, Confidence: 89,2%, Bitflip:   
#051 Byte: bd, n = 170, k = 84, Sum(a8): 128, Confidence: 89,2%, Bitflip:   
#052 Byte: 93, n = 170, k = 84, Sum(a8): 128, Confidence: 89,2%, Bitflip:  e
#053 Byte: 8f, n = 170, k = 86, Sum(a8): 128, Confidence: 89,2%, Bitflip:   
#054 Byte: 8e, n = 170, k = 86, Sum(a8): 128, Confidence: 89,2%, Bitflip: o 
#055 Byte: 5e, n = 170, k = 86, Sum(a8): 128, Confidence: 89,2%, Bitflip:  e
#056 Byte: fb, n = 175, k = 86, Sum(a8): 128, Confidence: 89,2%, Bitflip:  e
#057 Byte: 7c, n = 182, k = 93, Sum(a8): 128, Confidence: 89,0%, Bitflip:   
#058 Byte: 79, n = 182, k = 93, Sum(a8): 128, Confidence: 89,0%, Bitflip: o 
#059 Byte: fa, n = 168, k = 85, Sum(a8): 128, Confidence: 88,9%, Bitflip: o 
#060 Byte: c3, n = 168, k = 83, Sum(a8): 128, Confidence: 88,9%, Bitflip:   
#061 Byte: e6, n = 164, k = 63, Sum(a8):  96, Confidence: 88,7%, Bitflip:   
#062 Byte: af, n = 180, k = 92, Sum(a8): 128, Confidence: 88,7%, Bitflip:   
#063 Byte: f1, n = 166, k = 82, Sum(a8): 128, Confidence: 88,5%, Bitflip:   
#064 Byte: c5, n = 171, k = 84, Sum(a8): 128, Confidence: 88,5%, Bitflip:   
#065 Byte: 51, n = 171, k = 84, Sum(a8): 128, Confidence: 88,5%, Bitflip:   
#066 Byte: 06, n = 171, k = 84, Sum(a8): 128, Confidence: 88,5%, Bitflip:   
#067 Byte: b2, n = 178, k = 87, Sum(a8): 128, Confidence: 88,4%, Bitflip:   
#068 Byte: 8b, n = 178, k = 91, Sum(a8): 128, Confidence: 88,4%, Bitflip:   
#069 Byte: 84, n = 178, k = 91, Sum(a8): 128, Confidence: 88,4%, Bitflip:  e
#070 Byte: 0c, n = 178, k = 87, Sum(a8): 128, Confidence: 88,4%, Bitflip:  e
#071 Byte: c0, n = 164, k = 83, Sum(a8): 128, Confidence: 88,2%, Bitflip:   
#072 Byte: 49, n = 164, k = 81, Sum(a8): 128, Confidence: 88,2%, Bitflip:  e
#073 Byte: 7e, n = 167, k = 82, Sum(a8): 128, Confidence: 87,8%, Bitflip: o 
#074 Byte: 0b, n = 174, k = 89, Sum(a8): 128, Confidence: 87,7%, Bitflip:   
#075 Byte: ae, n = 165, k = 81, Sum(a8): 128, Confidence: 87,5%, Bitflip:   
#076 Byte: 37, n = 183, k = 94, Sum(a8): 128, Confidence: 87,4%, Bitflip:   
#077 Byte: e3, n = 181, k = 93, Sum(a8): 128, Confidence: 87,1%, Bitflip: o 
#078 Byte: 9a, n = 161, k = 79, Sum(a8): 128, Confidence: 86,8%, Bitflip:   
#079 Byte: 34, n = 179, k = 92, Sum(a8): 128, Confidence: 86,8%, Bitflip:   
#080 Byte: dc, n = 168, k = 82, Sum(a8): 128, Confidence: 86,7%, Bitflip:   
#081 Byte: 77, n = 177, k = 91, Sum(a8): 128, Confidence: 86,5%, Bitflip:   
#082 Byte: b9, n = 166, k = 81, Sum(a8): 128, Confidence: 86,4%, Bitflip: o 
#083 Byte: 23, n = 166, k = 85, Sum(a8): 128, Confidence: 86,4%, Bitflip: o 
#084 Byte: 25, n = 175, k = 85, Sum(a8): 128, Confidence: 86,1%, Bitflip:   
#085 Byte: ad, n = 173, k = 84, Sum(a8): 128, Confidence: 85,8%, Bitflip:   
#086 Byte: d9, n = 162, k = 79, Sum(a8): 128, Confidence: 85,7%, Bitflip:   
#087 Byte: 33, n = 160, k = 78, Sum(a8): 128, Confidence: 85,4%, Bitflip: o 
#088 Byte: ea, n = 184, k = 89, Sum(a8): 128, Confidence: 85,3%, Bitflip: o 
#089 Byte: de, n = 184, k = 95, Sum(a8): 128, Confidence: 85,3%, Bitflip:  e
#090 Byte: 71, n = 184, k = 95, Sum(a8): 128, Confidence: 85,3%, Bitflip:   
#091 Byte: a4, n = 169, k = 87, Sum(a8): 128, Confidence: 85,2%, Bitflip: o 
#092 Byte: f9, n = 160, k = 98, Sum(a8): 160, Confidence: 85,0%, Bitflip: o 
#093 Byte: b4, n = 167, k = 81, Sum(a8): 128, Confidence: 84,9%, Bitflip:   
#094 Byte: 57, n = 167, k = 81, Sum(a8): 128, Confidence: 84,9%, Bitflip: o 
#095 Byte: 44, n = 180, k = 87, Sum(a8): 128, Confidence: 84,7%, Bitflip:  e
#096 Byte: 41, n = 167, k = 102, Sum(a8): 160, Confidence: 84,6%, Bitflip:  e
#097 Byte: e2, n = 165, k = 85, Sum(a8): 128, Confidence: 84,5%, Bitflip:   
#098 Byte: 26, n = 165, k = 85, Sum(a8): 128, Confidence: 84,5%, Bitflip:   
#099 Byte: 1e, n = 154, k = 79, Sum(a8): 128, Confidence: 84,4%, Bitflip:  e
#100 Byte: ff, n = 178, k = 86, Sum(a8): 128, Confidence: 84,4%, Bitflip:   
#101 Byte: 85, n = 163, k = 84, Sum(a8): 128, Confidence: 84,2%, Bitflip:   
#102 Byte: ba, n = 176, k = 91, Sum(a8): 128, Confidence: 84,1%, Bitflip: o 
#103 Byte: 24, n = 176, k = 91, Sum(a8): 128, Confidence: 84,1%, Bitflip: o 
#104 Byte: f8, n = 174, k = 90, Sum(a8): 128, Confidence: 83,8%, Bitflip:   
#105 Byte: a6, n = 174, k = 90, Sum(a8): 128, Confidence: 83,8%, Bitflip:   
#106 Byte: 6e, n = 174, k = 90, Sum(a8): 128, Confidence: 83,8%, Bitflip:   
#107 Byte: a3, n = 172, k = 89, Sum(a8): 128, Confidence: 83,5%, Bitflip: o 
#108 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#109 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#110 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#111 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#112 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#113 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#114 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#115 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#116 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#117 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#118 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#119 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#120 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#121 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#122 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#123 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#124 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#125 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#126 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#127 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#128 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#129 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#130 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#131 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#132 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#133 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#134 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#135 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#136 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#137 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#138 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#139 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#140 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#141 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#142 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#143 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#144 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#145 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#146 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#147 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#148 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#149 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#150 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#151 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#152 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#153 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#154 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#155 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#156 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#157 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#158 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#159 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#160 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#161 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#162 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#163 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#164 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#165 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#166 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#167 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#168 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#169 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#170 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#171 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#172 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#173 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#174 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#175 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#176 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#177 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#178 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#179 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#180 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#181 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#182 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#183 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#184 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#185 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#186 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#187 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#188 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#189 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#190 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#191 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#192 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#193 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#194 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#195 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#196 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#197 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#198 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#199 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#200 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#201 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#202 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#203 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#204 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#205 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#206 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#207 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#208 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#209 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#210 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#211 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#212 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#213 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#214 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#215 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#216 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#217 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#218 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#219 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#220 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#221 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#222 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#223 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#224 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#225 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#226 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#227 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#228 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#229 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#230 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#231 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#232 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#233 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#234 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#235 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#236 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#237 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#238 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#239 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#240 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#241 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#242 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#243 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#244 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#245 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#246 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#247 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#248 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#249 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#250 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#251 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#252 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#253 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#254 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
#255 Byte: 00, n = 172, k = 83, Sum(a8): 128, Confidence: 83,5%, Bitflip:   
          
Sum(a0) = 136          
Number of first bytes with confidence > 95,0%: 20          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 136: 16937635385344 (2^43,9)
Reducing Partial Statelists (p,q) = (6,10) with lengths 181736, 185062
Odd  state candidates:      0 (2^-inf)
Even state candidates:      0 (2^-inf)
Odd  state candidates:    900 (2^9,8)
Even state candidates:  16124 (2^14,0)
Odd  state candidates:   1104 (2^10,1)
Even state candidates:  16640 (2^14,0)
Odd  state candidates:      0 (2^-inf)
Even state candidates:      0 (2^-inf)
Reducing Partial Statelists (p,q) = (10,6) with lengths 182032, 178706
Odd  state candidates:      0 (2^-inf)
Even state candidates:      0 (2^-inf)
Odd  state candidates:    822 (2^9,7)
Even state candidates:  14444 (2^13,8)
Odd  state candidates:   1160 (2^10,2)
Even state candidates:  14272 (2^13,8)
Odd  state candidates:      0 (2^-inf)
Even state candidates:      0 (2^-inf)
Number of remaining possible keys: 61310648 (2^25,9)
Time for generating key candidates list: 6 seconds          
Looking for known target key in remaining key space...          
Key NOT found!

Last edited by AT91SAM (2015-12-28 01:59:41)

piwi · 2015-12-31 12:19:29

It is expected that the key cannot be found in some cases. If the log says "Confidence: 95%" it means that this guess can be wrong in 5% of all cases. And there is not only one such guess, but 20 guesses when e.g. 20 nonces are considered - so the total probability of at least one wrong guess is even bigger.

If no key can be found, then simply try again (acquiring new nonces of course - not repeating with the same recorded nonces.bin file ).

AT91SAM · 2016-01-03 04:38:20

Any new developments?

Iam testing a lot of cards to see if I can reproduce the 91 situation.
but nu luck yet... mabey its a idea if we can store mutiple noucefiles one for every key A/B per / sector.
Sectors as explained here https://www.supremainc.com/en/node/477
This will save a lot of work analyse a card and typing all commands by hand....
But why not implement 5.1 of the paper?
parity bits are very predictable and a 2^42 with a wrong key only took my computer 77 seconds to find
that the key was not in the 2⁴42 key space!
that's well under 6 minutes!
as described in 7.0 it reqiries 6-12 minutes per card and you will get there so what is the problem of adding it?
Testing random keys looks kind of foolish to me when you can use parity bits as "plain text"
And if you want to find out the why of the 2⁴42 to make better reduction I think we need to know the key...
by brute forcing the parity bits!

Last edited by AT91SAM (2016-01-03 05:58:28)

AT91SAM · 2016-01-03 06:54:58

Looks like this 91 thing "However, the block 91 of the same card is quite weird: there are only 5 different first bytes in your nonces - but in this case the acquisition shouldn't complete."
looks to happen on other cards too , only not at block 91
I mailed my sugestions.

AT91SAM · 2016-01-03 07:11:40

and if you cant replay true mail use my gpg key and post it here.

piwi · 2016-01-03 20:54:21

AT91SAM wrote:

Looks like this 91 thing "However, the block 91 of the same card is quite weird: there are only 5 different first bytes in your nonces - but in this case the acquisition shouldn't complete."
looks to happen on other cards too , only not at block 91

I found a bug in the sorting function which resulted in showing only a few first bytes. Fixed it and now it shows all 256 possibilities as expected. Doesn't help though with the worst case example. Still 2^42 remaining keys.

AT91SAM wrote:

Iam testing a lot of cards to see if I can reproduce the 91 situation.
but nu luck yet...

I am meanwhile quite sure that it is simply a worst case example. You may have noticed that only the 2nd and 3rd quartile are displayed in the paper. This example would belong the the 4th quartile...

AT91SAM wrote:

But why not implement 5.1 of the paper?

It is implemented (this is where I take my run time estimations from). But I don't see any reason in publishing it because it doesn't have any relevance in verifying Roel's paper. We don't want to publish cracking tools for the script kiddies out there, don't we?

AT91SAM wrote:

And if you want to find out the why of the 2⁴42 to make better reduction I think we need to know the key...
by brute forcing the parity bits!

We know the reason: this example shows only a very few unfavourable Sum(a8) properties and no Bitflip property at all. There is simply not enough information for the differential analysis. If one would look for a key which is hard to find by this kind of attack it would be exactly like this.

piwi · 2016-01-03 21:02:12

AT91SAM wrote:

and if you cant replay true mail use my gpg key and post it here.

I am currently skying and without my keyring. And if there are no secrets, we can as well stick to the forum.

AT91SAM · 2016-01-04 04:48:41

I found a bug in the sorting function which resulted in showing only a few first bytes. Fixed it and now it shows all 256 possibilities as expected. Doesn't help though with the worst case example. Still 2^42 remaining keys.

Well nice that you tell me now , I was not aware of you fixed it , did you commit the fix?
If yes I would like to retest the 91 block to see if it stays on 0%.

I am meanwhile quite sure that it is simply a worst case example. You may have noticed that only the 2nd and 3rd quartile are displayed in the paper. This example would belong the the 4th quartile...

It could also be something else , that's why I wanted to discover the key...
as I explained in my mail.

It is implemented (this is where I take my run time estimations from). But I don't see any reason in publishing it because it doesn't have any relevance in verifying Roel's paper. We don't want to publish cracking tools for the script kiddies out there, don't we

Well the nested command could also be used in this way , the paper is clear mifare is broken
Problem now is only the (criminal) organizations with money will pay people to develop it and keep it for them self and sell it.
these organizations can be worse the script kiddies.
not releasing a basic fully working version will allow other commercial organizations to NOT fix problems that SHOULD be fixed!
as concluded in 7.0
Because these cards take care of peoples safety and integrity in most cases!
And if you don't release you don't provide pressure to organizations using these cards to phase out those fancy memory cards.
Or improve back office checks!
they can simply deny the security issue.
This happened , as ISPs did for example with the infamous "reaver wifi attack" leaving all peoples internet open for abuse
by anyone with the right knowledge (while in practice the owner of the connection is responsible by law , for the transmitted data over its connection)
This allows a perfect blackmail , if the security flaw can be denied.
If the flaw is known the blackmailed can present its case and proof its innocence.
putting responsibility back were it belongs forcing the provider to take action.
smart cards can hold the same lawful responsibility , if cloned things can get pretty bad for the original holder.
its quite hard to prove it was not him when no one is aware of his cards security flaw.
I agree you should not be releasing tools for specific purpose i.e adding credit to a certain university cafeteria card.
I also agree that it should not be a easy to use tool so every 6 year old can do it!
But is proxmark3 easy to use?
I expected ending with a fully working tool , that's why I did not spend time
to build things my self.
and sharing my info and cards avoiding double work,
You could have released it as pen test tool.
so it can no longer be denied the mifare standard is broken beyond repair.
and people should not be depending safety on it in any way!
I hope you consider my arguments and change your mind.

Last edited by AT91SAM (2016-01-04 06:31:51)

AT91SAM · 2016-01-04 08:57:30

I am currently skying and without my keyring. And if there are no secrets, we can as well stick to the forum.

Oke sounds fair. ,
Only use gpg when needed , just let me know when you got access again
may be that first 2 mails are useless because you fixed the damn bug and did not inform me.
I tested 10's of cards last few days.
for helping , to find it.
Anny way made my plea for releasing a proper hardnested tool , also send some background info about me
I have seen it all before I am on the net for quite some time , a paper problem only exist on paper!
noting will be done about it until it exists in the real world.
its a fact that is sad but true , but i think is not responsible when it comes to stuff that is supposed to protect real peoples live and identity.

piwi · 2016-01-04 09:30:55

Most of the discussion is off topic meanwhile. Please open a new thread in "Various off-topic communication". My last words here regarding the black, grey, white hat: I agree to publish information about exploits and weaknesses to raise the awareness. I don't agree to increase the number of attackers by publishing cracking tools for everyone before affected clients had time to react. hf mf nested is a very old attack. But hf mf hardnested affects cards which had been believed to be fixed. This is my opinion and I will act accordingly. Full stop.

piwi · 2016-01-04 09:58:57

Well nice that you tell me now sad , I was not aware of you fixed it , did you commit the fix?
If yes I would like to retest the 91 block to see if it stays on 0%.

Sorry. Pushed.

AT91SAM · 2016-01-04 12:17:41

But hf mf hardnested affects cards which had been believed to be fixed.

Truth is they were NEVER fixed!
I can show you press release of the hack from Radbouit university
https://translate.google.com/translate? … kaart.html
its dated 4-2-2015! and yes one of the biggest local providers using these cards still don't care
about this , it exactly proves my point here.
You probably missed it.
we are now 1-4-2016 and it looks like some needs to take some responsibility here!
Ill open a treat in
"Various off-topic communication"
so we can discuss this.

Last edited by AT91SAM (2016-01-16 04:13:29)

piwi · 2016-01-10 15:52:42

Pushed a new commit. This now implements a test mode.

hf mf hardnested t 1000

would run the attack 1000 times with random keys and cuids. Statistics are written to a file hardnested_stats.txt.

I think that the statistics show that I need to work on the nonce acquisition parameters to further reduce the remaining key space...

Proxmark3 community

Announcement

#51 2015-11-30 04:42:44

Re: Mifare Plus Atack

#52 2015-11-30 05:26:13

Re: Mifare Plus Atack

#53 2015-11-30 08:37:46

Re: Mifare Plus Atack

#54 2015-11-30 14:05:33

Re: Mifare Plus Atack

#55 2015-11-30 14:17:35

Re: Mifare Plus Atack

#56 2015-11-30 15:15:59

Re: Mifare Plus Atack

#57 2015-11-30 16:52:19

Re: Mifare Plus Atack

#58 2015-11-30 18:20:58

Re: Mifare Plus Atack

#59 2015-12-01 11:54:48

Re: Mifare Plus Atack

#60 2015-12-01 20:36:59

Re: Mifare Plus Atack

#61 2015-12-08 02:22:50

Re: Mifare Plus Atack

#62 2015-12-08 07:24:21

Re: Mifare Plus Atack

#63 2015-12-08 14:20:28

Re: Mifare Plus Atack

#64 2015-12-08 22:05:40

Re: Mifare Plus Atack

#65 2015-12-09 07:59:25

Re: Mifare Plus Atack

#66 2015-12-09 10:56:48

Re: Mifare Plus Atack

#67 2015-12-10 08:04:18

Re: Mifare Plus Atack

#68 2015-12-10 14:41:20

Re: Mifare Plus Atack

#69 2015-12-14 00:35:30

Re: Mifare Plus Atack

#70 2015-12-14 08:21:44

Re: Mifare Plus Atack

#71 2015-12-14 16:10:35

Re: Mifare Plus Atack

#72 2015-12-14 16:28:08

Re: Mifare Plus Atack

#73 2015-12-15 07:42:19

Re: Mifare Plus Atack

#74 2015-12-16 04:51:38

Re: Mifare Plus Atack

#75 2015-12-16 08:20:58

Re: Mifare Plus Atack

#76 2015-12-16 16:53:36

Re: Mifare Plus Atack

#77 2015-12-17 02:22:09

Re: Mifare Plus Atack

#78 2015-12-17 08:43:53

Re: Mifare Plus Atack

#79 2015-12-17 15:15:16

Re: Mifare Plus Atack

#80 2015-12-18 13:59:25

Re: Mifare Plus Atack

#81 2015-12-18 18:15:05

Re: Mifare Plus Atack

#82 2015-12-19 12:51:46

Re: Mifare Plus Atack

#83 2015-12-20 19:11:47

Re: Mifare Plus Atack

#84 2015-12-21 17:36:20

Re: Mifare Plus Atack

#85 2015-12-22 03:19:36

Re: Mifare Plus Atack

#86 2015-12-24 15:44:39

Re: Mifare Plus Atack

#87 2015-12-26 15:43:13

Re: Mifare Plus Atack

#88 2015-12-28 01:56:27

Re: Mifare Plus Atack

#89 2015-12-31 12:19:29

Re: Mifare Plus Atack