Thread: Question on PKE
View Single Post
  #6  
Old 09-19-2007, 21:48
tofu-sensei tofu-sensei is offline
Friend
 
Join Date: Jul 2004
Posts: 113
Rept. Given: 1
Rept. Rcvd 15 Times in 9 Posts
Thanks Given: 4
Thanks Rcvd at 24 Times in 13 Posts
tofu-sensei Reputation: 15
edge.nfo
Code:
  RSA FACTORING DETAILS
   The (c158) key was factored using the GNFS.
   Special care was taken in the choice of a good polynomial, so a
   substantial CPU power was spent in this step.
   Using a factor base with bound 30*10^6 (on both rational and algebraic
   side), we lattice sieved most special-q from 30*10^6 to 120*10^6.
   Large primes up to 2^32 were allowed. The sieving region was 16384x8192.
   Finally 111166072 relations were produced. After filtering and
   reduction, we obtained a matrix of 5834788x5835036 of weight
   435572936.
   After finding the matrix's nullspace, 37 dependencies were found.
   This was done using a parallel Block-Lanczos implementation.
   Computing the square roots took about a couple of hours per dependency.
   Finally, on the 1st dependency a non-trivial factorization was
   obtained, yielding two p79 factors. These are:
   96859774968738100242749024031422454403737620189568319581559767450468778
   34947331
   and
   97612888871279422460170795622468505446565299697129772078285299016368621
   44931893
   Calendar time for the factorization was about 2 weeks, including
   polynomial selection.
Attached Images
File Type: png edge.png (6.0 KB, 14 views)
Reply With Quote