Using the ghost‑signal, Echo injected a during the RNG’s reseed window. The glitch forced the LFSR to skip one iteration, effectively “freezing” its output. The team recorded the resulting keystream, then used a custom script to reverse‑engineer the seed from the observed output.