Armadillo ECDSA-113

[contextrax]

Originally Posted by Kerlingen

You're talking about 90 CPUs. Keygenning a single software (if you own that amount of hardware) will cost you like 1000+ US-$ for energy alone, if you have to rent cloud computing you will be at 5000+ US-$.

I was thinking more of a joined attack. 90 cpu's is like 90 different people running the solver.

[mr.exodia]

https://transfer.sh/nO14Y/softwarepassport32.exe

[contextrax]

Originally Posted by mr.exodia

  Short V3 Level 10:
    Chk : B5EC5364
    Sym: BDA4FA1C
  BaseP : 1570789295 (Size=50, Diff=112C, MD5=0F656698)
  Pub.X : 2127081270816270912006137526418476
  Pub.Y : 7206819234412870204027887633390168

I see there are many more of these certs in Armadillo. Did you verify that this is the correct ones to break?

I calculated the base point from basepoint init using the armadillo keygen source "KeyMakerV420j.c".
Don't know if this is the latest code so if you could check and see if they matches yours.

Target: "Armadillo v9.64 Public"

Optimal Normal Base Type II
BasepointInit: 1570789295 (0x5DA057AF)
ONB2 Base.X  : 4089747062247003654720736468506441
ONB2 Base.Y  : 10111618751385367037406972360317044
ONB2 Pub.X   : 2127081270816270912006137526418476
ONB2 Pub.Y   : 7206819234412870204027887633390168

And here they are in polynomial base if anyone wants to play with them

Polynomial base (t^113 + t^9 + 1)
Poly Base.X  : 1C1A1BB26597755705B9D996CC209
Poly Base.Y  : 7229DDE3CDDFAC01016B1E84D648
Poly Pub.X   : 4CA5BE7E12F5B8C8CAA93744E99
Poly Pub.Y   : 788BCC901CC832FAA020610A14EB

[mr.exodia]

Yeah that cert is the one that matches my key. You can quite easily verify by using the ECDSA_Replace plugin for the inline tab in akt and replace this cert with your own. Keys without any extrainfo should then be accepted.

[sendersu]

if someone will code GPU solution I might try it on the most advanced GPU nowadays - Nvidia P100

[jump]

If you want a target, here is one: VideoReDo (using Armadillo v9.66).

http://www.videoredo.com/en/Download.htm?download=tvsuitev5

[contextrax]

I started solving ecdlp for armadillo. If anyone want to participate then send me a pm and I will give you a download link to the solver with some instructions.
The solver runs on CPU only atm. (No GFX card support yet)

[g0d]

Originally Posted by contextrax

I started solving ecdlp for armadillo. If anyone want to participate then send me a pm and I will give you a download link to the solver with some instructions.
The solver runs on CPU only atm. (No GFX card support yet)

I want to participate. btw, your pm is not allowed to receive.

[contextrax]

I posted a link to the solver in the Reversing Software section.
Look for ECC Solver

[g0d]

Originally Posted by contextrax

I posted a link to the solver in the Reversing Software section.
Look for ECC Solver

no linux version?

[contextrax]

Originally Posted by g0d

no linux version?

Some of my friends are running it on linux using wine. This works great.
I don't know to much on how to code on linux so I would need some one to do it for me. I was planing on sharing the core code for the solver so anyone interested in this stuff can play with it.
The core code should be pretty easy converting to linux. It is coded in C using intrinsics for the XMM code.
Rest of the solver using multi threading and windows api for server communication and will probably need more work to convert.

[contextrax]

A new version of the solver is posted in the Reversing Software section.
The new version is a bit faster and will also let you get some server statistics on how many points are collected and how many clients are running.
I see more and more clients is joining over time. It was a slow start but speed is picking up.

[Kerlingen]

Is the curve solved? The server is down since more than 12 hours and if my last calculations are correct we would have tested 30-35% of the possible curves until now.

[contextrax]

Server is back up again now. Had some problem with my provider.
We have now computed like 2^50 iterations and my last ECDLP solved after this many iterations.
But average iteration needed to solve this curve should be 2^52.
If we are lucky we should find a solution pretty soon
I will start checking for a collision daily next week.

[sendersu]

Originally Posted by contextrax

I started solving ecdlp for armadillo. If anyone want to participate then send me a pm and I will give you a download link to the solver with some instructions.
The solver runs on CPU only atm. (No GFX card support yet)

any ideas when GPU support will be added up?