Subject: Discussion related to cado-nfs
List archive
[cado-nfs] Factoring 350 to 400 bits long rsa number… But in less than 5 to 7 minutes and less than 100€
Chronological Thread
- From: Laël Cellier <lael.cellier@grenoble-inp.org>
- To: cado-nfs@inria.fr
- Subject: [cado-nfs] Factoring 350 to 400 bits long rsa number… But in less than 5 to 7 minutes and less than 100€
- Date: Mon, 11 Mar 2024 00:34:29 +0100
- Authentication-results: mail2-smtp-roc.national.inria.fr; spf=None smtp.pra=lael.cellier@grenoble-inp.org; spf=None smtp.mailfrom=lael.cellier@grenoble-inp.org; spf=None smtp.helo=postmaster@smtpout01-ext2.partage.renater.fr
- Dkim-filter: OpenDKIM Filter v2.10.3 zmtaauth03.partage.renater.fr 93BF4800D2
- Ironport-sdr: 65ee4386_krxdxWEX6EOegXnLrStWZQJWdLHB2y/cbsiUoJt0WN4py/e DVkSR9BD/CE330q1NDBNAGb3GKziMnDnDzU5MsA==
As everybody here knows, the ɢɴꜰꜱ is the most efficient algorithm for factoring numbers formed of roughly equal in length composites.
But it’s linear Algebra/sequential parts means (If I’m not wrong), that it requires at least 9 minutes on current hardware to factor semi‑primes formed of composites of roughly equal length (in the case of 382 bits semi‑primes the Linear part takes 6 to 10 minutes).
Are there less efficient algorithms but by being more parallelizable, that would allow to solve batch of such semi‑primes faster using more resources ? (though not prohibitively costly). If yes, it would be good for ᴄᴀᴅᴏ to support them…
The aim is part of a small competition where the reward goes to the first who answers. The fact the record is still 9 minutes for 382 bits semi‑prime seems to tell there’s no solution : but there’s currently only 3 participants in the race.
Sincerely,
- [cado-nfs] Factoring 350 to 400 bits long rsa number… But in less than 5 to 7 minutes and less than 100€, Laël Cellier, 03/11/2024
- Re: [cado-nfs] Factoring 350 to 400 bits long rsa number… But in less than 5 to 7 minutes and less than 100€, Pierrick Gaudry, 03/11/2024
Archive powered by MHonArc 2.6.19+.