From fork-admin@xent.com Mon Aug 19 11:03:26 2002
Return-Path: <fork-admin@xent.com>
Delivered-To: yyyy@localhost.netnoteinc.com
Received: from localhost (localhost [127.0.0.1])
by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 0453D441A1
for <jm@localhost>; Mon, 19 Aug 2002 05:54:47 -0400 (EDT)
Received: from phobos [127.0.0.1]
by localhost with IMAP (fetchmail-5.9.0)
for jm@localhost (single-drop); Mon, 19 Aug 2002 10:54:48 +0100 (IST)
Received: from xent.com ([64.161.22.236]) by dogma.slashnull.org
(8.11.6/8.11.6) with ESMTP id g7GMMC605701 for <jm@jmason.org>;
Fri, 16 Aug 2002 23:22:13 +0100
Received: from lair.xent.com (localhost [127.0.0.1]) by xent.com (Postfix)
with ESMTP id 555CF2940B5; Fri, 16 Aug 2002 15:20:08 -0700 (PDT)
Delivered-To: fork@spamassassin.taint.org
Received: from relay.pair.com (relay1.pair.com [209.68.1.20]) by xent.com
(Postfix) with SMTP id A4A45294098 for <fork@xent.com>; Fri,
16 Aug 2002 15:19:32 -0700 (PDT)
Received: (qmail 71540 invoked from network); 16 Aug 2002 22:20:54 -0000
Received: from adsl-66-124-225-138.dsl.snfc21.pacbell.net (HELO golden)
(66.124.225.138) by relay1.pair.com with SMTP; 16 Aug 2002 22:20:54 -0000
X-Pair-Authenticated: 66.124.225.138
Message-Id: <00aa01c24573$2cbf10f0$640a000a@golden>
From: "Gordon Mohr" <gojomo@usa.net>
To: <fork@spamassassin.taint.org>
References: <20020816204431.ADEF4C44E@argote.ch>
Subject: Re: Elliptic Curve Point Counting, made easy
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Msmail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: fork-admin@xent.com
Errors-To: fork-admin@xent.com
X-Beenthere: fork@spamassassin.taint.org
X-Mailman-Version: 2.0.11
Precedence: bulk
List-Help: <mailto:fork-request@xent.com?subject=help>
List-Post: <mailto:fork@spamassassin.taint.org>
List-Subscribe: <http://xent.com/mailman/listinfo/fork>, <mailto:fork-request@xent.com?subject=subscribe>
List-Id: Friends of Rohit Khare <fork.xent.com>
List-Unsubscribe: <http://xent.com/mailman/listinfo/fork>,
<mailto:fork-request@xent.com?subject=unsubscribe>
List-Archive: <http://xent.com/pipermail/fork/>
Date: Fri, 16 Aug 2002 15:20:48 -0700
Robert Harley writes:
> Here are some numbers with the new algorithm for counting points on
> elliptic curves (over fields of characteristic 2).
>
> In 1998, Reynald Lercier set a record at 1663 bits in 330 days of CPU
> on 266 MHz Alphas. In 1999, Frederik Vercauteren set a record at 1999
> bits in 65 days of CPU on 400 MHz PCs.
>
> I've been working on the problem since then. These were measured just
> now on Rajit's 750 MHz Alpha:
>
> 1009 bits:
> Lift: 4.8 s + 0.64 s precomputation.
> Norm: 2.6 s + 0.31 s precomputation.
>
> 1663 bits:
> Lift: 18.5 s + 2.1 s precomputation.
> Norm: 7.0 s + 1.9 s precomputation.
>
> 1999 bits:
> Lift: 29.4 s + 3.6 s precomputation.
> Norm: 16.6 s + 3.4 s precomputation.
>
> 15013 bits:
> Lift: 1 h 39 m + 13 m precomputation
> Norm: 39 m + 1 h 41 m precomputation
Not knowing one whit about elliptic curve math, can you provide
some expert interpretation of these results?
It looks like the old record for, say, 199 bits, has been
blown out of the water by a factor of ~100,000.
Does this mean that Eliptic Curve encryption is
now easily breakable? Or faster than before with
no loss in strength? Or stronger?
Raw bits are OK, cooked bits are better.
- Gordon
http://xent.com/mailman/listinfo/fork