Merge pull request #236 from fireeye/williballenthin-patch-1

Create generate-random-numbers-using-the-delphi-lcg.yml
mandiant · Feb 3, 2021 · 45c0f15 · 45c0f15
2 parents 126e084 + b7555ec
commit 45c0f15
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/nursery/generate-random-numbers-using-the-delphi-lcg.yml b/nursery/generate-random-numbers-using-the-delphi-lcg.yml
@@ -0,0 +1,16 @@
+rule:
+  meta:
+    name: generate random numbers using the Delphi LCG
+    namespace: data-manipulation/prng/lcg
+    author: william.ballenthin@fireeye.com
+    scope: basic block
+    mbc:
+      - Cryptography::Generate Pseudo-random Sequence [C0021]
+    references:
+      - https://en.wikipedia.org/wiki/Linear_congruential_generator
+      - https://community.osr.com/discussion/130410/generating-random-numbers
+  features:
+    - and:
+      - mnemonic: imul
+      - number: 0x8088405 = multiplier a
+      - mnemonic: inc = increment c