MysteryTwister C3
Registration has been disabled due to technical issues.
NUMBER OF ACTIVE MEMBERS:

2956
MysterTwister C3 - Partners
Follow us: Facebook Twitter
 

Last visit was: It is currently Sat May 19, 2012 07:48


All times are UTC + 1 hour [ DST ]


Forum rules


This forum is meant for discussing and sharing ideas of the Level II challenges. Do not post any complete solutions or codewords for any of the challenges. In case of posting solutions your post will be deleted and your account will be banned immediately.



Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Challenge "RSA Factoring Challenge: RSA-210"
PostPosted: Tue Feb 07, 2012 11:37 
Site Admin
User avatar

Joined: Wed Sep 30, 2009 14:10
Posts: 152
This challenge descends from the RSA Laboratories contest to encourage research into the practical difficulty of factoring large integers of different length (between 330 and 2048 bit) and cracking RSA keys used in cryptography. This challenge is about factoring a number with 210 decimal digits.
Read more...


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Mon Feb 13, 2012 03:54 

Joined: Tue Jun 14, 2011 00:18
Posts: 68
Is there any way to estimate how long these numbers take to factor? Are we talking computer-years? Months?


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Mon Feb 13, 2012 11:41 

Joined: Tue Oct 19, 2010 19:30
Posts: 20
Well this surely depends on the algorithms used, the computer you have and the efficiency of either your or someone else's implementation.

Additionally I am sure you will see a huge boost if you are using a graphics card (or multiple) or a set of FPGA (though this would be quite expensive for a private person).

Then you can test how fast your machine is (how many numbers it tests per sec) and calculate how many possible numbers there are.
RSA-210 has 696 bits and so p and q will roughly be of size 350 bits, so would have to evaluate all numbers that could make up this n and are in range of 350 bits (as this is far more likely). So if you go from say 340 bits to 360 bits you can calculate all possible outcomes and compare this number against how many tests you do per sec.

Keep in mind that to break a 56-bit DES on modern FPGA-arrays takes roughly one day to a week (depending on what you got), but since you will be using graphic cards most likely, it's hard to compare those numbers.

Just do a quick implementation by yourself and see what turns out to be.

If you ask for just a rough estimate my personal estimate would be in the scope of many months or years.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Wed Mar 07, 2012 07:53 

Joined: Wed Mar 07, 2012 07:24
Posts: 3
I'm currently working this one without use of a sieving field, servers, or any of the fancy stuff. I'm using a calculator at http://comptune.com/calc.php and a word doc. I've got it limited down to a range of odd number 105 digits in length and I'm slowly working till I get an answer out of the system. I thought about programming something to do it, but I figured I might as well solve it out by "hand" for fun. I've been at this for about 3 months on hand and i figure it will take about 4-5 months of 24/7 work to find a viable answer.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Wed Mar 07, 2012 16:04 

Joined: Wed Jul 27, 2011 17:13
Posts: 142
kataanglover1 wrote:
I've been at this for about 3 months on hand and i figure it will take about 4-5 months of 24/7 work to find a viable answer.
Do I understand it correctly, that your idea is to check by trial division every odd integer "n" in the interval 10^104<=n<10^105 whether it divides N?
If so, then my calculation revealed that even if you were able to check billions of numbers every nanosecond it still would take far far, unimaginable far more than the current age of the universe.

But maybe I misunderstood your idea.

For comparison, the best current estimate of the age of the universe is 4.336 x 10^17 seconds, i.e. 13.75 x 10^9 years.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Fri Mar 23, 2012 12:38 

Joined: Wed Mar 07, 2012 07:24
Posts: 3
Veselovský wrote:
Do I understand it correctly, that your idea is to check by trial division every odd integer "n" in the interval 10^104<=n<10^105 whether it divides N?


Except you don't have to check every odd integer. You only have to check against the primes.

Also, actually you don't have to start at 10^104 and go all the way up to 10^105, you only need to start at:

245246644900278211976517663573088018467026787678332759743414451715061600830038587216952208399332071549104

and go to the square root of the RSA number. Since you already know that both numbers have to be 105 digits, this number outputs a quotient right at the limit of breaking 105 digits. All you have to do is know every prime number in the space between that number and the square root and then systematically divide it out.

It's still probably an impossibility with all these handicaps in place, but nobody has said that I can't do it. I've got the primes, all I lack is a program to systematically divide them. My programming skills have been going down the drain as of late. If anyone wants to help with that part, I'm up for any help that can be given.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Fri Mar 23, 2012 15:04 

Joined: Wed Jul 27, 2011 17:13
Posts: 142
kataanglover1 wrote:
All you have to do is know every prime number in the space between that number and the square root and then systematically divide it out.
Checking by trial division only the primes reduces the space of search very little compared to checking every odd number for such a big N. You still would need to live unimaginably more than the age of the universe to do this. There are much more efficient methods then trial division (whether you divide by all odd numbers or only by primes)
kataanglover1 wrote:
I've got the primes, all I lack is a program to systematically divide them.
In what sense you got the primes? Even if every atom in the universe stores one prime, there still would not be enough to store all primes in the search space.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Fri Mar 23, 2012 15:15 

Joined: Wed Mar 07, 2012 07:24
Posts: 3
Veselovský wrote:
Checking by trial division only the primes reduces the space of search very little compared to checking every odd number for such a big N. You still would need to live unimaginably more than the age of the universe to do this. There are much more efficient methods then trial division (whether you divide by all odd numbers or only by primes)
kataanglover1 wrote:
I've got the primes, all I lack is a program to systematically divide them.
In what sense you got the primes? Even if every atom in the universe stores one prime, there still would not be enough to store all primes in the search space.


I'm always one for efficiency! What do you have in mind? For now I've just been manually putting through a calculator with copypaste. Anything has to be better that that.

When I say I've got every prime, I mean I have the ability to find every prime in the search space without using extra resources on the order of a gpu cluter, aka a website with every viable prime in the search space listed and searchable.


Top
Offline Profile  
 
 Post subject: Re: Challenge
PostPosted: Fri Mar 23, 2012 15:50 

Joined: Wed Jul 27, 2011 17:13
Posts: 142
http://en.wikipedia.org/wiki/Integer_factorization
Look at "Factoring algorithms".
Veselovský wrote:
For now I've just been manually putting through a calculator with copypaste.
:-) Do you think that RSA would be considered as secure if it were possible to break it manually? Surely you can do it manually for a small number... but I doubt you can do it for such a "small" semi-prime like this: 19093349095069286057. Can you? :-)


Top
Offline Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC + 1 hour [ DST ]


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Localized by Maël Soucaze © 2010 phpBB.fr
 
 
powered by the CrypTool project  CrypTool

 

   +++    [07:00 - 19.05.2012] xxdradus has solved the Level II challenge 'Alice's Birthday Party (Part 2)'    +++    [05:20 - 19.05.2012] ngnicky has solved the Level I challenge 'Number Sequence'    +++    [09:29 - 18.05.2012] vancan has solved the Level II challenge 'Not-so-Secret Message from Malawi – Part II (ECC)'    +++    [08:55 - 18.05.2012] NeverWalkAloner has solved the Level I challenge 'Number Sequence - Part 2'    +++    [08:48 - 18.05.2012] NeverWalkAloner has solved the Level I challenge 'Number Sequence'    +++