References

1. cryptopals crypto challenges. https://www.cryptopals.com/.
2. Python bytes.fromhex. https://docs.python.org/3/library/stdtypes.html#bytes.fromhex.
3. Python base64. https://docs.python.org/3/library/base64.html.
4. Rust hex::decode. https://docs.rs/hex/latest/hex/fn.decode.html.
5. Rust String::from_utf8_lossy. https://doc.rust-lang.org/std/string/struct.String.html#method.from_utf8_lossy.
6. Rust base64 URL-safe alphabet. https://docs.rs/base64/latest/base64/#url-safe-alphabet.
7. Python int.to_bytes. https://docs.python.org/3/library/stdtypes.html#int.to_bytes.
8. PyCryptodome long_to_bytes. https://www.pycryptodome.org/src/util/util#Crypto.Util.number.long_to_bytes.
9. Source code for long_to_bytes. https://github.com/Legrandin/pycryptodome/blob/dc92e70ffb276d946364f62d0f87c6d66d75ffe3/lib/Crypto/Util/number.py#L407.
10. Python randrange. https://docs.python.org/3/library/random.html#functions-for-integers.
11. Python randbelow. https://docs.python.org/3/library/secrets.html#random-numbers.
12. Python SHA1. https://docs.python.org/3/library/hashlib.html#hashlib.sha1.
13. pwntools GitHub repo. https://github.com/Gallopsled/pwntools.
14. pwntools documentation. https://docs.pwntools.com/.
15. pwntools xor. https://docs.pwntools.com/en/stable/util/fiddling.html#pwnlib.util.fiddling.xor.
16. Frequency analysis. https://en.wikipedia.org/wiki/Frequency_analysis.
17. PyCryptodome CBC Mode. https://www.pycryptodome.org/src/cipher/classic#cbc-mode.
18. PyCryptodome Crypto.Util.Padding module. https://www.pycryptodome.org/src/util/util#crypto-util-padding-module.
19. Python secrets.token_bytes. https://docs.python.org/3/library/secrets.html#generating-tokens.
20. Hamming distance. https://en.wikipedia.org/wiki/Hamming_distance.
21. Convert int to binary string in Python. https://stackoverflow.com/a/699892.
22. Format Specification Mini-language. https://docs.python.org/3/library/string.html#format-specification-mini-language.
23. SciPy Hamming distance. https://docs.scipy.org/doc/scipy/reference/generated/scipy.spatial.distance.hamming.html.
24. Key corresponding to min value in dict. https://stackoverflow.com/a/3282904.
25. Secure Remote Password protocol. https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol.
26. hmac.compare_digest. https://docs.python.org/3/library/hmac.html#hmac.compare_digest.
27. pwntools listen. https://docs.pwntools.com/en/stable/tubes/sockets.html#pwnlib.tubes.listen.listen.
28. Python getpass. https://docs.python.org/3/library/getpass.html.
29. Byte order, size, and alignment (struct). https://docs.python.org/2/library/struct.html#byte-order-size-and-alignment.
30. Format characters (struct). https://docs.python.org/2/library/struct.html#format-characters.
31. Padding (cryptography), PKCS#7. https://en.wikipedia.org/wiki/Padding_(cryptography)#PKCS#5_and_PKCS#7.
32. SRP Protocol Design. http://srp.stanford.edu/design.html.
33. Python os.urandom. https://docs.python.org/3/library/os.html#os.urandom.
34. Random number generation. https://cryptography.io/en/latest/random-numbers/.
35. Python secrets.randbelow. https://docs.python.org/3/library/secrets.html#secrets.randbelow.
36. Number Theory and Cryptography. Levin M, Kulikov A. University of California San Diego, https://www.coursera.org/learn/number-theory-cryptography.
37. PyCryptodome bytes_to_long. https://www.pycryptodome.org/src/util/util#Crypto.Util.number.bytes_to_long.
38. SymPy crt. https://docs.sympy.org/latest/modules/ntheory.html#sympy.ntheory.modular.crt.
39. SymPy integer_nthroot. https://docs.sympy.org/latest/modules/core.html#sympy.core.power.integer_nthroot.
40. "Bleichenbacher's RSA signature forgery based on implementation error". Finney, H. https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE/.
41. "Bleichenbacher ’06 RSA Signature Forgery: What they assume you know". Hemsley, L. https://landonhemsley.com/bleichenbacher-06-rsa-signature-forgery-what-they-assume-you-know/.
42. "Serious Crytography: A Practical Introduction to Modern Encryption". Aumasson, JP. No Starch Press, 2018.
43. PyCryptodome RSA key type. https://www.pycryptodome.org/src/public_key/rsa.
44. PyCryptodome PKCS#1 v1.5 (RSA) signatures. https://www.pycryptodome.org/src/signature/pkcs1_v1_5.