Slashdot Mirror


RC5-64 Success

Peter Trei writes "After over four years of effort, hundreds of thousands of participants, and millions of cpu-hours of work, Distributed.net has brute forced the key to RSA Security's 64 bit encryption challenge, winning a US$10,000 prize. Still outstanding Challenges carry prizes as high as $200,000. RSA's PR release is here. d.net's site has not yet been updated." Update: 09/26 16:59 GMT by CN : The good folks over at SlashNET are having a forum with the distributed.net crew on Saturday at 21:00 UTC. It'll be a great time to meet some of the people who made this possible.

127 of 365 comments (clear)

  1. d.net's site update by ChronoZ · · Score: 5, Informative
  2. No more RC5 in OpenBSD by chrysalis · · Score: 3, Funny

    Funny. The RC5 algorithm has just been removed from OpenBSD because of copyrights.


    --
    {{.sig}}
    1. Re:No more RC5 in OpenBSD by tomstdenis · · Score: 2, Insightful

      copyrights or patents?

      Anyone with a bit of skill can code their own RC5 code... I know I did it. However, there are US patents on the RC5 algorithm...

      Tom

      --
      Someday, I'll have a real sig.
  3. Heh by GigsVT · · Score: 3, Insightful

    While it's debatable that the duration of this project does much to devalue the security of a 64-bit RC5 key by much, we can say with confidence that RC5-64 is not an appropriate algorithm to use for data that will still be sensitive in more than several years' time.

    Heh, it took a world-wide effort of thousands of computers over 1700 days. I don't think there is any debate at all; they proved the opposite of what they set out to prove. :)

    --
    I've had enough abrasive sigs. Kittens are cute and fuzzy.
    1. Re:Heh by Papineau · · Score: 5, Informative

      Not really. If you consider that over 5 years, the average keyrate is 105.5 GKeys/sec, and the latest day averages were somewhere around 180 GKeys/sec, it means the same thing could have been finished in almost half the time, if it was started now with today's computers. Moore's law being what it is, if it really was started again now, it would take around half that time again, because more powerful CPUs are to be unveiled in that timeframe.

      By their own estimates, it would take ~46000 Athlon XP 2GHz (now, where are you to find those right now?) to have 270 GKeys/sec (their peak rate in 5 years), which gives completing the keyspace in 790 days. Who would buy that much CPUs? Good question. With 2 dual MP motherboards in 1U (too lazy to find a link, I know somebody offers something like that), it would only take about 300 40U racks. Would you bet future national security on it? I don't think I would (and I'm not even american).

      What it really shows is that brute-force can succeed, given enough time. But of course the more effective way to attack an encrytion algorithm is on the algorithmic side, because it helps you to find not only one cleartext, but all cleartexts encrypted with that algorithm.

    2. Re:Heh by Pii · · Score: 2
      Keep in mind that the US government has secrets dating back in time from way before the Kennedy assassination. 4 years is way too short for secrets like that.

      That's funny... I'd say that 4 years is far too long for secrets like that.

      --
      For those that would die defending it, Freedom
      has a sweet taste that the protected will never know.
    3. Re:Heh by swillden · · Score: 2
      Not to mention: You're talking about doing it with general-purpose hardware. It would cost far less to build specialized hardware that would crack it much, much faster. That's precisely what the EFF did for DES with Deep Crack.

      Even if it took four years and a large, collaborative effort, the fact that general purpose machines can do this at all means that it's insecure against a determined adversary with a couple million dollars to spend.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    4. Re:Heh by Chester+K · · Score: 2

      If you consider that over 5 years, the average keyrate is 105.5 GKeys/sec, and the latest day averages were somewhere around 180 GKeys/sec, it means the same thing could have been finished in almost half the time, if it was started now with today's computers.

      And the fact that now we know the key would speed up another attempt considerably. I'd go so far as to say it'd take even less than half the amount of time if we started again today!

      --

      NO CARRIER
  4. Well then by dalassa · · Score: 2

    I suppose I can shut dnetc down for now and give my processors a rest. Congratulations to whoever got the lucky key.

    --
    Feminism is the radical notion that women are people.
    1. Re:Well then by Atzanteol · · Score: 2

      There is always OGR...

      --
      "Ignorance more frequently begets confidence than does knowledge"

      - Charles Darwin
  5. Good job folks by chainrust · · Score: 2, Troll

    Nice, except for the fact it doesn't matter. It wasn't even the real encryption code. Also, it never would have happened without distributed processing, so this isn't a real demonstration of computing power, but actually a demonstration of distributed computing power.

  6. With apologies to Douglas Adams by mh_tang · · Score: 4, Funny

    So tell me, was the answer "42"?

    1. Re:With apologies to Douglas Adams by affenmann · · Score: 5, Informative

      No, it is: "some things are better left unread". This doesn't apply to Douglas Adams, of course.

    2. Re:With apologies to Douglas Adams by KarmaBitch · · Score: 2, Informative
      Almost :-D
      0x63DE7DC154F4D03
      You got a 4....

      I'm sure 42 was tested in one of the 15,769,938,165,961,326,592 keys tried.

      The unknown message is: some things are better left unread
    3. Re:With apologies to Douglas Adams by Jugalator · · Score: 3, Informative

      No, it is: "some things are better left unread".

      Actually, if you read closely, the plaintext output is:

      "The unknown message is: some things are better left unread"

      I admit I didn't get it at first, but if just you read closely... ;-)

      --
      Beware: In C++, your friends can see your privates!
  7. FINALLY. by KFury · · Score: 5, Funny

    Does this mean I can go back to alien hunting now?

    1. Re:FINALLY. by d.valued · · Score: 2

      Don't count out distributed.net completely. They do have other projects, like the Optimal Goulomb Ruler project and the various blitz project which pop up now and then for other encryption technologies.

      And IMHO, alien hunting is a waste of time, since we still don't really have a clue as to how they would communicate. I mean, if they are as advanced as we are, then that means that they would be at least hundreds of lightyears away from us (by consensus opinion) and therefore: their radio sigs would also be hundreds of years old and wouldn;t give us enough insight to them anyway. Besides, how do we know which freqs to check? How do we know that they don't allocate spectrum EXACTLY like we do?

      I'm just going to go back to the Mersenne project for now. They have a huge check waiting for the next person to find a Mersenne prime.

      Besides that: There's always RC5-72....

      --
      I used to be someone else. Now I'm someone better.
      Real life is underrated.
    2. Re:FINALLY. by McCart42 · · Score: 5, Informative

      No, you can still work on the optimal golomb ruler project (OGR), which is an interesting distributed project that becomes exponentially more difficult for each added mark. Currently they are working on a 25-mark ruler, and verifying the 24-mark ruler. From the linked page: "OGR's have many applications including sensor placements for X-ray crystallography and radio astronomy. Golomb rulers can also play a significant role in combinatorics, coding theory and communications, and Dr. Golomb was one of the first to analyze them for use in these areas."

      --
      "I may be quite wrong." - Socrates
    3. Re:FINALLY. by Eil · · Score: 2


      Heh. Well, I'm not much for alien hunting, but I'm also getting bored of cracking encryption. Yeah, there's money involved, but I'd like to do something that matters. I've got that United Devices protein folding program running in windows, but that seems to have some kind of commercial slant.

      Anyone want to suggest their favorite distributed project for using up spare CPUs? Bonus points for it being actually useful, non-profit, and multi-platform.

    4. Re:FINALLY. by pben · · Score: 3, Informative

      Internet-based Distributed Computing Projects has a good list of current projects. I have been waiting for Climate Prediction to start. There have been several stories on it here before. In the mean time I have been giving spare CPU cyctes to Distributed Particle Accelerator Design.

    5. Re:FINALLY. by Matt2000 · · Score: 5, Insightful


      Seriously though, can anyone tell me what the attraction to the d.net project was? It seems like a colossal waste of cycles to me. Everyone knew it was going to be successful, it was just a matter of wasting enough time to eventually find the right block.

      Now that it's over, what do we have to show for it? A whole lot of nothing it seems.

      --

    6. Re:FINALLY. by Goonie · · Score: 2
      And IMHO, alien hunting is a waste of time, since we still don't really have a clue as to how they would communicate.

      But we now know quite a bit about the electromagnetic spectrum so we can make some reasonably intelligent guesses.

      I mean, if they are as advanced as we are, then that means that they would be at least hundreds of lightyears away from us (by consensus opinion) and therefore: their radio sigs would also be hundreds of years old and wouldn;t give us enough insight to them anyway.

      Wouldn't just "there's something else out there" be a pretty cool first insight?

      Besides, how do we know which freqs to check?

      SETI gear checks *lots* of frequencies at once.

      How do we know that they don't allocate spectrum EXACTLY like we do?

      We don't. We assume that they're likely to be using a narrowband signal (rather than UWB-like techniques), but beyond that we don't assume much.

      --

      Any sufficiently advanced technology is indistinguishable from a rigged demo
      --Andy Finkel (J. Klass?)
    7. Re:FINALLY. by Eil · · Score: 2


      Wow. This post deserves a 5. If I had a room full of machines, I could keep them all busy on different projects. Of course, now to convince the fiancee that I need a room full of machines...

  8. Re:Heh ?? by veddermatic · · Score: 3, Informative

    I'd say not.. in several years time, the average laptop / home PC will be able to crank out the work that the distributed project did in a week or so... meaning in a few years, an individual will be able to decrypt RC5-64 data in a realistic timeframe for (mis)use.

    That's the point.... is RC5-64 (effectively) safe today? It sure the heck is.. this project proved that! Will it be safe in 5 years? Heck no, and that was the point.

    --
    Department of Homeland Security: Removing the rights real patriots fought and died for since 2001
  9. Congratulations by Dirtside · · Score: 5, Insightful

    While this is an admirable achievement, I found another distributed computing project which I think is more worthwhile -- namely, Folding @Home, which is a distributed protein-folding simulation effort. This is the kind of research that will end up curing things like Alzheimer's, and I think it's a better use of your processing time than brute-forcing encryption keys (or even SETI, or Primenet). I encourage everyone to participate in F@H instead, as I think it will provide a greater benefit to us all in the long run.

    Of course, some on /. may need to be reminded that they are indeed free to run whatever distributed computing software they feel like; I am merely requesting that they run this one.

    --
    "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    1. Re:Congratulations by eddy · · Score: 3, Informative

      Yes, and don't forget genome@home. You might consider joining the Wicked Old Atheists even :-)

      --
      Belief is the currency of delusion.
    2. Re:Congratulations by Timmeh · · Score: 2
      Don't forget that in _Engines of Creation_, K. Eric Drexler devotes a whole chapter (i think, it's been awhile) to protein folding and how it may lead to the first 'nano-machines' in a sense. If we know how certain proteins fold perhaps we can get them to fold im just the right way to make the first crude nano-assembler. Although the book *was* written quite a bit ago (1987 I belive), so I'm not sure if the nanotech community still looks to protein folding as a possible method for building assemblers.

      And yes, I run a F@H client on my box damn near 24/7. I like how it's very conservative with it's use of resources when I run other app's. I can play Counter-Strike or UT2K2 and not even have to terminate it.

    3. Re:Congratulations by Dirtside · · Score: 2

      I would think it more accurate to say that "these things" can make you money, should you or your team happen to be the one that finds the key/finds a prime/finds extraterrestrial intelligence. The chance is minuscule in any case. I also hope that the /. readership would be more inclined toward the rightness of the thing, rather than worrying about potential monetary rewards.

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    4. Re:Congratulations by numpins · · Score: 2, Insightful

      Improving the quality of these clients would also help their acceptance. I use d.net on an iMac because it can pause itself when certain tasks are running (Warcraft III, Giants) and is smart enough to not waste my iBook's battery when I unplug it.

    5. Re:Congratulations by quintessent · · Score: 2

      And don't forget UD's Cancer research.

    6. Re:Congratulations by Dirtside · · Score: 2

      Every distributed client I've ever seen runs itself by default at the lowest possible priority, so as not to take resources away from games or other user-responsive applications. This is a nonissue in general, and F@H itself does run at lowest priority, so it's a nonissue for F@H also. (I've played numerous games with F@H running in the background, and there's been no noticeable effect by the client.)

      The disable-when-on-battery-power idea is nice, and I certainly think it would help, but I don't know if the catch-all "quality" is the best term to use. Maybe "laptop-friendliness" would be more precise.

      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
  10. Re:Yea!!! by Tom · · Score: 3

    I don't know why the parent was modded up as funny, but:

    There is a difference between saying "in theory, we could do this and that" and actually doing it.

    Cryptography specifically is a realm of arbitrary large numbers, theoretical math way, way beyond what 99% of people ever learn in both school and university, and lots of guesswork, estimates, approximations, you name it.

    I don't think anyone is really surprised by the outcome, but nevertheless, the only real proof that something can be done is and always will be to actually do it.

    --
    Assorted stuff I do sometimes: Lemuria.org
  11. I went through... by LinuxGeek · · Score: 2

    ...several computers during this 64bit phase of RSA cracking. Started with a K6-233, then K62-450, dual Celeron 450, Duron 800, Athlon 1GHz, Athlon 1.4GHz and now AthlonXP 1700+ @ 2000+. I wonder what we will be running when (if?) RC5-72 is cracked.

    --

    Kindness is the language which the deaf can hear and the blind can see. - Mark Twain
    1. Re:I went through... by OrangeSpyderMan · · Score: 3, Funny

      Wow, this stuff blew all those machines and you still want to do it? :-)

      --
      Try NetBSD... safe,straightforward,useful.
  12. Re:Yea!!! by Blkdeath · · Score: 2, Insightful
    Of course, ASCI White (or, even better, Japan's new super computer) could probably crack RC5-64 in a matter of hours.

    That's what has to be considered in all of this.

    --
    BD Phone Home!

    Shameless plug. Like you weren't expecting it.

  13. Re:Yea!!! by unicron · · Score: 2

    How many computers were working on rc5-64 for how many years? White isn't that many factors faster.

    All bets are off though once we get quantum machines up and running...provided we can get around the whole heisenberg principle.

    --
    Finally, math books without any of that base 6 crap in them.
  14. I think many posters here are missing the point by watanabe · · Score: 5, Insightful
    I think many posters here are missing the point of this. RSA wants people to crack these weaker crypto offerings; it makes their story better, not worse.
    • They know exactly how insecure RC5-64 is. They want other IT groups, industry groups and tech managers to know it. The easiest way to do that is to offer open challenges with cash prizes. It's never hard for RSA to up their bit-length to 4096, say, a year before 2048 RSA is broken, and someone collects their $200,000. It is hard to make PHBs understand that RC5-64 is not secure if nobody has broken it.
    Secondly, Distributed.net clearly isn't doing it for the cash. I didn't do it for the cash, either. (Although I wouldn't have minded winning.) They're doing it because:
    • Breaking codes gives nerds their kicks.
    • Building a distributed computing architecture is a difficult and interesting problem.
    With current technology, as RSA likes to demonstrate, the winners are the cryptographers, not the cryptologists (the code breakers.) Quantum computing may change that, and make the cryptologists the winners. Until then, RSA can happily give cash prizes for increasing length keys: the numbers are on their side.
    1. Re:I think many posters here are missing the point by Nugget · · Score: 2

      This isn't strictly true. I think a strong case can be made that public challenges like this are very effective in driving the development of innovative or simply incrementally more efficient approaches to an algorithim's implementation.

      Although CPU speeds are significantly faster now than when they were in 1997 when RSA announced the secret key challenges we've also gotten a lot better at optimizing rc5 in software.

      Innovations like Kwan's bitsliced/sbox approach to DES are revolutionary and driven in part by the motivation created by public challenges such as the RSA Labs' contests.

      I don't accept your statement that the existence of or participation in these public projects in any way reduces the chances that someone will discover a weakness in the underlying algorithm. If anything, it's more likely since optimized implementations of an algorithim such as we see in dnetc generate more interest and consequently more people becoming familiar with the mathematics.

  15. How crazy is this? by WalterGR · · Score: 5, Funny

    From the press release - "a coordinated team of computer programmers and enthusiasts, known as distributed.net, has solved the RC5-64 Secret-Key Challenge."

    If you remove a single element - the $10,000 award offered by RSA - then the press release would read more like,

    "A group of degenerate hackers [sic] cracked an encryption method owned by RSA Security Inc. The company has contacted law enforcement authorities, and an attempt to track down these hackers [sic] is currently under way. Under the DMCA, these criminals, when caught, faces sentances of up to..."

  16. Re:Yea!!! by eddy · · Score: 2

    I'm with the OP on this. Once in a time there was a purpose with cracking DES; proving it wasn't as hard (secure) the government wanted people to believe. However, that was a long time ago now.

    C'mon, estimating the time of a brute-force attack is almost trivial. Once you can time how long it takes to attack some percentage of the keyspace, interpolation to mid- and worst-case is simple.

    There's a lot of other distributed problems to spend time on, problems where the solution actually is worth something.

    --
    Belief is the currency of delusion.
  17. Re:Are they going to share the prize? by miltimj · · Score: 5, Informative

    Hmmm... as it says here:

    RSA Labs is offering a US$10,000 prize to the group that wins this contest. The distribution of the cash will be as follows:

    $1000 to the winner
    $1000 to the winner's team - this would go to the winner if he wasn't affiliated with a team
    $6000 to a non-profit organization, decided by vote
    $2000 to distributed.net for building the network and supplying the code

    The vote will be decided on through an extension of the statistics engine, with one vote per block per person.


    And to think.. it took a few seconds to find that, and a couple minutes to type your post..

    --
    "Truth is not decided by majority vote" consensus gentium -- Norman Geisler
  18. Re:Yea!!! by defile · · Score: 2

    I remember when this first started out they believed it would take about 1000 years to crack.

    There's a lot of interesting information that comes from this aside from the actual problem being attacked.

  19. Hope you don't live in the US by Nailer · · Score: 2

    As you've just dispensed information which used be used to circumvent a digital media protection device.

  20. Not really. by pclminion · · Score: 2
    There are unbreakable cryptosystems. The one-time pad is unbreakable.

    I'm too tired to explain why, I'm sure someone else will pick up the buck on this one.

    1. Re:Not really. by Richard_at_work · · Score: 2

      The British Intelligence, in league with the NSA and the Australian Intelligence services, managed to do exaclty what u say. Basically in the 1950s -> 1970s the Soviets ran short of cypher material so they reissued Pads, not jsut once, but many times.
      Basically what the hunt then entailed of, was traffic capturing, and then use early computers to trawl this traffic looking for matches in the coded groups, which isnt such a hard task, as certain groups (such as SPELL and ENDSPELL) come up a lot more often than others, and a pre encoding dictionary is finite in size.
      When matches came up between two messages, you had something in common between the messages which could be used to attackthe other groups in the messages.
      Basically the stats for all this make poor reading, something like 30% of traffic was "broken" into, which sounds good untill u realise that "broken into" can actually mean that a single group or word was uncovered in the message, still making the message unreadable.

      If you want to read more, read Spy Catcher.

  21. Distributed.net no longer in the public eye by HoserHead · · Score: 5, Insightful
    It's sad, really, that so much focus has moved off Distributed.net to SETI@Home and the other distributed computing projects when Distributed.net was one of the real pioneers of this style of computing (that is, harnessing regular people's CPU time).

    In one of my CS classes, we were discussing distributed computing, and a question of any well-known distributed computing projects was asked. I answered "Distributed.net" - and the instructor promptly asked "What's that?" The next student to respond, of course, said SETI: the answer he was looking for.

    Maybe I'm biased, as the former maintainer of distributed-net for Debian, but has Distributed.net really become this unimportant and forgotten?

    1. Re:Distributed.net no longer in the public eye by T3kno · · Score: 2

      Not for me, there is no bigger waste of CPU cycles than SETI. Any computer I ever find running SETI@home gets a severe beating and a quick download of D.net. If you want to burn those unused cycles do it on something that matters.

      --
      (B) + (D) + (B) + (D) = (K) + (&)
    2. Re:Distributed.net no longer in the public eye by Zathrus · · Score: 2

      If you want to burn those unused cycles do it on something that matters

      And brute forced cracking of an encryption algorithm, which everyone who cares knows is possible anyway, matters?

      No thanks... I'd rather have my spare cycles go to something that will help cure cancer, Alzheimer's, or the like. (Yes, I know, d.net has "partnered" with UD on the cancer bit, but it's not a d.net project).

      Frankly, I'd give the edge to SETI@home over d.net's projects. But that's just me. I do think that there's alien life out there, but I doubt it's trying to communicate in a fashion that we'll be able to find with SETI@home.

    3. Re:Distributed.net no longer in the public eye by sirinek · · Score: 2

      I quit participating, after in early 1999 they took their stats offline and it took them well over 2 months to get it back online, depriving me of seeing how well I did each day compared to the rest of my team. I had 160 sun workstations cranking out keys nightly from 0000-0600 but there was no more excitement for me anymore without the stats.

      SETI is a waste of cycles, and dnet isnt getting my cycles anymore. Is anything else available for linux? It seems a lot of those clients for cancer, genome, etc are windows/mac-only.

      siri

    4. Re:Distributed.net no longer in the public eye by Amazing+Quantum+Man · · Score: 2

      Folding@Home does have a Linus client

      So they gave Linus a book on origami and some paper? How does he find time to work on the kernel when he's folding at home?

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
    5. Re:Distributed.net no longer in the public eye by jlcooke · · Score: 2, Interesting

      It's been forgotten because they attacked something of little relevence.

      RC5? How uses that? Really. The DES challanges were at least interesting because you could go to work the next day and say "hey! d.net checked this algo, don't use it!"

      So I say d.net needs to move back to attacking an algorithm people use everyday. Don't think they could do it?

      Cracking MD5 wide ope can be done in 2 years using the same number of people at the RC5-64 project. And you'll get millions of cracks in the algorithm and not just one.

      We'll see what nugget says...

  22. Re:Yea!!! by NeoSkandranon · · Score: 2

    Winning 10,000 dollars isn't productive?

    --
    If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
  23. hmm... wonder if I hit the key by zaren · · Score: 2

    Well, at least my G3 and G4 at home will get to spin down at nights now... and I can dedicate all the spare cpu on my sparc at work to seti :)

    --
    Come to the University of Mars! Classes starting soon!
  24. 32,504 800 MHz G4 vs. 45,998 2 GHz Athlon XP? by icrooks · · Score: 2, Interesting

    "Our peak rate of 270,147,024 kkeys/sec is equivalent to 32,504 800MHz Apple PowerBook G4 laptops or 45,998 2GHz AMD Athlon XP machines ...."

    800 MHz G4 is faster crunching the keys than a 2 GHz Athlon XP

    I am reading that right?

    1. Re:32,504 800 MHz G4 vs. 45,998 2 GHz Athlon XP? by Stormie · · Score: 2

      800 MHz G4 is faster crunching the keys than a 2 GHz Athlon XP. I am reading that right?

      Yes. I've never seen anything which shows off Altivec quite as well as RC5 cracking. There are hand optimised assembly cores for various CPUs in the d.net client, but the Altivec-enhanced G4 core pretty much destroys everything. I expect it's because Altivec has vastly more flexible shuffling instructions than MMX.

      This by no means proves that a G4 is "better" than an Athlon, but it's interesting.

  25. an interesting bit of trivia by Nugget · · Score: 5, Interesting
    While the prospect of a false-positive key was the subject of much speculation during RC5-56, we did in fact encounter exactly such a beast during RC5-64.

    In the interests of speed, only the first "block" of the crypted text is decrypted and evaluated for a solution. This means that it's possible for a key which isn't the correct key to report as a false positive because although it doesn't decrypt the text it does yield a plaintext which matches "The unkn" for the first eight bytes.

    There's been much speculation and napkin scribbling on just how frequently such false positives might present themselves. The general consensus seemed to be that such an occurrence is extremely improbable but in a dataset the size of 2**64, extremely improbable may still yield a nonzero frequency.

    The key 0xBB27D52F60FD932C does, indeed, decrypt to a plaintext for which the first eight bytes match the known plaintext for the contest. The remainder of the decrypted text, however, is just garbage. This key has actually been returned by clients twice over the course of the contest.

    In August 1999, "Edward Scissorhands" turned in the key.

    Again in July 2000, Team RC5 Chile submitted it. Since they're unfortunately using a shared email address for their team, there's no way to know which individual was the submitter.

    I wasn't the winning key, but was a really unique "near miss". It also represents an interesting datapoint regarding the RC5 algorighim. A brute-force search is really the only way to conclusively determine the liklihood of such false positives.

    1. Re:an interesting bit of trivia by BovineOne · · Score: 5, Interesting

      Nugget is wrong, the false positive was actually found three times. Most recently, the bymer@ukrpost.net worm found the false-positive on
      November 6, 2001. There potentially could be problems identifying the owner of that worm-infected machine and having to explain the
      circumstances of a winning solution, but fortunately that was only a false positive.

      --
      Don't waste those cycles! Put them to use! http://www.distributed.net/
    2. Re:an interesting bit of trivia by Papineau · · Score: 2

      The short answer is that to be able to track all blocks, the keyserver concentrates on a small portion of the keyspace at a time. So if 90% of that small part is returned, the balance will be resent, in an attempt of getting the results faster and be able to switch to another part of the keyspace.

      Search on the distributed.net website for more details, I recall a graph saying that 95%+ blocks were returned after 4 days, and after that the return rate was nearing zero, so it makes sense to resend those after a few days.

      There's also the possibility that it was in a random generated block: when your client cannot reach the keyserver, it processes a block at random (actually, I think all the random blocks are close to each other). That would explain the 3 reports, at almost 1 year interval each.

  26. What have we discovered in this exercise? by Dr.+Spork · · Score: 2, Insightful
    You know, anybody with a pencil can figure out how many computation cycles it will take to produce 50% probability that the key will crack. Then, it seems like the only trick to it is to sit there and wait a few months while your CPUs heat the room, and then you eventually find out whether it will crack before the 50% probability or after.

    In the process, we have learned absolutely nothing. It's like a game where I say "I'm thinking of a place, can you guess where it is?" Then hundreds of thousands of you would send in guesses, and eventually you would get it. What a pointless exercise that would be! I'm sorry, but I don't see the difference here. In a way this is even less interesting, because you know that sometime the code will crack. There is no element of surprise at all in the results, and once we have it, we learn... nothing at all.

    In the process, how much electricity do we waste chugging through the code? Did one of you clever people calculate how many fewer tons of CO2, soot and radioactive waste would have been produced if you had just left your Athlons turned off? How about all the air conditioners you used to cool the rooms the Athlons live in?

    For the next challenge, I suggest that you just pretend your CPU is working, and in a few months (time determined randomly according to the probability of cracking if your computers had been on), the guy who issued the challenge will pretend that his code was cracked and announce what his oh-so-important secret message was. That would sure make me happier--and it's not like we'd lear any less that way.

    (Notice also that my criticism doesn't apply to SETI or protein folding projects. At least they give us a chance of finding out something.)

    1. Re:What have we discovered in this exercise? by Dr.+Spork · · Score: 2
      I do think the poster you replied to makes an interesting point: maybe what we learned is something about human nature, namely, that very many of them would be willing and/or able to waste significant personal resources for a totally predictable and trivial project. The more I think about that, the more interesting I find it. The lesson, then, is that there are tons of people in the wings, ready to do a numbercrunching project for (what they perceive as a) good cause.

      I agree with you that SETI is pretty damn unlikely to turn up anything, but that in itself is sort of interesting too. I mean, why don't we hear other civilizations? And maybe, when people look at a computer overheating from SETI crunching, they think about how much alike we all are as human beings, and how the thought of interaction with aliens makes our terrestrial squabbles seem petty. Alright, I'm probably overstating the case.

      Protein folding... I don't know much about this project, but isn't it the case that your CPU simply becomes the bitch of a pharmaceutical company that's going to pantent the stuff they learn from your calculations? That really put me off. I am happy to serve mankind, but not to line the pockets of evil drug companies.

      So, what does my computer do at night? It serves FTP. Sure, pretty laid back for the CPU, but I think it does a whole lot more for people than any relevant alternatives.

  27. We were more lucky this time. by wunderhorn1 · · Score: 2
    Dnet was much more lucky with the RC5 project. We found the key with 12% of the keyspace left to go (with odds of 135 to 1).

    For the last project, CSC, we had to exhaust the entire keyspace and then go back and recheck some of the work.

    Congrats to everyone who participated.

    And just for kicks, here are my final stats on the project:
    Rank: 38501 (out of 331,286)
    First block: 25-Sep-1999
    Last Block: 22-Sep-2002
    Days working: 1,094 (out of 1,796)
    Total Blocks: 226,544 (out of 61,015,324,138!)
    The odds were 1 in 3,802,292 that I would have found the lucky key before anyone else.

    --
    Karma: Bored. (Thinking about resurrecting the "Anyone else is an imposter" joke.)
  28. Let's check the math... by Planesdragon · · Score: 2, Interesting

    Ok... "thousands of computers" and 1700 days. Let's call it 2000 computers putting in full 24 hours days. And let's assume that Moore's Law will remain true...

    Cracking RC5-64 took 384,000 computer/hours today. There are 168 hours in a week. So, for one computer to crack RC5-64 in a matter of weeks (less than five) would require a computer about 460 times faster than what we have now; assuming moore's law keeps going, we'll get those in about 13 years (2015).

    In five years (48 months), computers will be about 2.6 times as fast powerful as they are now; it'll still take over 147,000 computer-hours to crack the same code; one computer would take 16 years to crack that.

    (The same 2000 computers, once upgraded, could replicate their feat in a measly 654 days--still, two years.)

    And, of course, this assumes that Moore's Law remains constant, there's no overhead, and distributed.net's brute force test is a good example; it could have gotten lucky, or it could have taken them an unusually short time to find the right code.

    For a realisitic cracking scenerio, let's say our cracker has ten computers and wants to crack the code in a week... he'd still have to wait 8 years to be able to do it, and who'd want to bother with 13 year old data for cracking, anyway?

    1. Re:Let's check the math... by Papineau · · Score: 2, Interesting

      So, for one computer to crack RC5-64 in a matter of weeks (less than five) would require a computer about 460 times faster than what we have now; assuming moore's law keeps going, we'll get those in about 13 years (2015).

      You forget THE major point of Distributed.net: distributed computing. If you put 2 computers to the task, you already cut by half the time needed. Have more money? Put 3000 CPUs (go read the nVidia and ATI tour at Anandtech to see if somebody can afford those now) through it, and the time will shrink by the same amount.

      And regarding the time needed to crack it, I get a couple orders of magnitude greater than 384000 computer*hours. More akin to (quoting the PR) 46000*790*24=872 million computer*hour (using an Athlon XP 2GHz). A single CPU computer wouldn't be able to do it on a human scale time (would be about 100000 years), you absolutely need more than one computer to live to see the result.

      For a realisitic cracking scenerio, let's say our cracker has ten computers and wants to crack the code in a week... he'd still have to wait 8 years to be able to do it, and who'd want to bother with 13 year old data for cracking, anyway?

      I probably miss something about why the 8 years becomes 13, but there are some things that don't change in time, and could be used by somebody even in a few years. My credit card number hasn't changed since I first got it, same thing for my bank account. The goal is not for it to be secure only now, but also in the future. You may think about other examples involving national security if you prefer.

  29. Re:why not by gimpboy · · Score: 2
    while i like the concept behind the projects you linked to i have a couple questions:
    • if this distributed effort results in a good anticancer agent, does the company then patent it and sell it back to the public? the faq doesnt really address this:http://members.ud.com/projects/cancer/faq_che m.htm

    • does a linux client exsist? the download page doesnt seem to suggest there is a linux client:
      http://members.ud.com/download/gold/


    i would be happy to turn our computers loose on a problem which will result in something everyone can benifit from, but i'm not willing to install vmware to run it.
    --
    -- john
  30. Re:i cant even pronounce this number by Krach42 · · Score: 2, Informative

    fifteen quintillion seven hundred sixty-nine quadrillion nine hundred thirty-eight trillion one hundred sixty-five billion nine hundred sixty-one million three hundred twenty-six thousand five hundred ninty-two.

    In american english of course. I recall something about the british having "Millard" between million and thousand.

    --

    I am unamerican, and proud of it!
  31. End of an era (for me, anyway) by Scutter · · Score: 4, Interesting

    I'm surprised at how stunned and emotional I am upon reading this. After personally investing almost four years and uncounted trillions of clock cycles for over half a quadrillion keys and just like that it's over with. *sigh*

    I watched the progression of the computer industry grow just by watching the gradual increase of my daily keyrate.

    Four years ago when I first started, I was going through 52 blocks a day. Yesterday, I went through 2784 blocks. Looking at the daily graph is practically a history of my life for four years. I can see spikes where my company bought a dozen computers and I borrowed their cycles for a couple of days while I configured them. I can see dips where I turned my computers off to go on vacation for a weekend. There's the whole flat area from last year when I didn't have a job and so had limited access to extra CPU cycles.

    --

    "Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
  32. Sponsored by your local electric company... by anthony_dipierro · · Score: 3, Insightful

    300 Watts * 1 million hours = 300,000 kilowatt hours. 300,000 kilowatt hours * $0.10 = $30,000.

    I wonder how many U.S. and Iraqi soldiers died to make this great display of wasted energy possible.

    1. Re:Sponsored by your local electric company... by jgerman · · Score: 3, Insightful

      None. Your post isn't just insulting, it's idiotic. How many soldiers had to die to provide power for slashdot for the last year? How many had to die so we could play Playstation. The answer is none, always has been none, and will always be none. If you want to protest military action by posting snide comments on the web, at least do it with comments that are relevant, not bullshit rhetoric intended to pull at the audience's emotions.

      --
      I'm the big fish in the big pond bitch.
    2. Re:Sponsored by your local electric company... by jgerman · · Score: 3, Informative
      I'm not going to get drawn into an argument over why we're in a conflict with Iraq, or even whether or not we need the oil. The answer question is 0.


      You've forwarded the proposition that

      U.S. and Iraqi soldiers had to die to run the decryption.

      Which yields the converse:

      If wasn't run, no U.S. and Iraqi soldiers would have had to die.


      Which is patently untrue. You're attempt at an emotional appeal as an argument was not only weak, it was stupid. You might as well have said that not turning off your lights when you're not using them causes soldiers to die.

      --
      I'm the big fish in the big pond bitch.
    3. Re:Sponsored by your local electric company... by slamb · · Score: 2
      You've forwarded the proposition that
      U.S. and Iraqi soldiers had to die to run the decryption.

      Which yields the converse:

      If wasn't run, no U.S. and Iraqi soldiers would have had to die.

      Which is patently untrue. You're attempt at an emotional appeal as an argument was not only weak, it was stupid. You might as well have said that not turning off your lights when you're not using them causes soldiers to die.

      Umm, someone isn't familiar with logic. The converse of a true statement is not necessarily true. The contrapositive, however, is. In this case:

      If no U.S. and Iraqi soldiers died, the decryption would not have been run.

      Which is false, so the original statement must be also. But that doesn't change the fact that you've given a straw man - the converse wasn't something he asserted to be true at all.

      Remember:

      • P -> Q: original statement.
      • ~P -> ~Q: inverse.
      • Q -> P: converse.
      • ~Q -> ~P: contrapositive.

      The original and the contrapositive are equivalent statements. The others are not.

    4. Re:Sponsored by your local electric company... by anthony_dipierro · · Score: 2

      That's absurd. There is no relationship between the amount of energy americans use to the amount of soldiers that die.

      That's absurd. There is a relationship between the amount of energy americans use to the amount of soldiers that die.

      Plus, we're not going to attack Iraq, assuming we do, because we want their oil. Maybe you should read up on that?

      If Iraq didn't have oil, we wouldn't be attacking them. Hell, if Iraq didn't have oil, they wouldn't be dangerous.

    5. Re:Sponsored by your local electric company... by silentbozo · · Score: 2

      I'm assuming your figure of 300 Watts is the average computer load? That seems a bit high to me... even including your drives, graphics card, etc. Unless you're running some sort of unconventional monster, or a REALLY old machine, I would peg 150 Watts as the average load.

      That works to about $15,000, the cost of buying about a dozen workstations. If you give the user generating the keys 5 cents per kilowatt hour, that runs about $22,500 total over 4 years, or $5625 a year. That's a decent price to rent what amounts to a supercomputer (albeit, a supercomputer with ugly latency between nodes.)

      I dispute the notion that this is wasted energy, as 1) many workstations would have been sitting idle anyways, 2) the point of this exercise was to prove that short key lengths (ie 56 bits, 64 bits) are bad for any organization or individual who needs to keep data encrypted for long periods of time (say, until after 20, 30 years, or until the end of someone's lifetime.)

      Of course, there are the geeks who dug machines out of the trash or bought new processors/boxes under the rationalization that they'd find the key and win the prize, who then ran their boxes, and their relatives' boxes, and other peoples' boxes (if they were lab admins), 24 x 7, requiring air conditioning, efficiency losses incurred in powering the air-conditioning, shipping expenses related to the shipping of new processors because they accidently toasted the ones they were overclocking, etc. I suppose they could have spent that time pedaling on bikes equipped with generators to help with the energy shortage... but then you'd incur the expenses associated with the extra food they'd be eating!

  33. Re:Heh ?? by Tony+Hammitt · · Score: 2

    You're very bad at math.

    that laptop would have to run at about 30000000000MHz, assuming that (and this is probably low) 1000000 CPU years assuming PIII/500MHz were spent on this project...

    Good luck finding one of those

  34. More worthwhile? by mblase · · Score: 2

    Scanning outer space for the remote possibility of advanced alien life, which may or may not have any interest in even contacting us... versus the very real and present problem of testing the security of a widely-used encryption algorithm.

    Yeah, sure, that's a much more "worthwhile" pursuit.

    1. Re:More worthwhile? by southpolesammy · · Score: 4, Interesting

      Let me ask you, what did we learn from the breaking of the RC5-64 algorithm? That given enough resources we could break what seems to be a strong algorithm? We knew that long ago. Did we learn any new methods of sequencing that might assist us in determining the innate strength of this algorithm that we could apply to others? Not hardly. We knew beforehand that the sequence would eventually be found at least by brute force, and since that proved to be true, we learned nothing about how to do it better the next time. The only palpable gain was the demonstration of a large distributed network of nodes working together to achieve a goal, but that too has been demonstrated before.

      Bottom line -- the whole RC5-64 project was a big freaking no-op. Therefore, yes, I do feel looking for signs of extraterrestrial life, or gene sequencing, or some other task would have been more fruitful than the goal of this pursuit. I realized that years ago and switched to SETI as a direct result of that observation. And the point about whether ET wants to contact us or not is irrelevant. If the SETI project was able to attain their goal, it would literally be the greatest event in history. Because of the ramifcations of this possibility, the end goal is more worthy and will reveal something about the nature of things, rather than prove a hypothesis we already know to be true and provable. The amount of CPU cycles wasted on this project that could have been applied elsewhere is staggering.

      --
      Rule #1 -- Politics always trumps technology.
  35. Obviously time for 65-bit now by TomatoMan · · Score: 2

    See, 64-bit can be broken in four years. Time to move to 65-bit, that'll keep us safe until 2010 or so. Wake up, people!

    --
    -- http://frobnosticate.com
  36. False positives in RC5-64 by BovineOne · · Score: 5, Interesting

    Naturally there is a lot of interest about finding the solution, but what about "almost solutions" found by false-positive hits?

    In the interests of speed, only the first "block" of the crypted RC5-64 text is decrypted and evaluated for a solution. This means that it's possible for a key which isn't the correct key to report as a false positive because although it doesn't decrypt the text it does yield a plaintext which matches "The unkn" for the first eight bytes.

    The key 0xBB27D52F60FD932C does, indeed, decrypt to a plaintext for which the first eight bytes match the known plaintext for the contest. This key has actually been submitted three times over the course of the contest, once by three different users.

    In August 1999, again in July 2000. Most recently, the bymer@ukrpost.net worm found the false-positive on November 6, 2001. There potentially could be problems identifying the
    owner of that worm-infected machine and having to explain the circumstances of a winning solution, but fortunately that was only a false positive.

    Fortunately, we eventually found the actual key. But because we were seeing these legitimate false-positives being reported throughout the duration of the contest, we had full confidence that our network and our clients were functioning properly and that we would eventually find the actual solution in time.

    --
    Don't waste those cycles! Put them to use! http://www.distributed.net/
  37. Re:Yea!!! by Boone^ · · Score: 2

    All you'd need is a heisenberg compensator circuit connected to the machine, right?

  38. Re:Yea!!! by NeoSkandranon · · Score: 2

    Faulty logic. The cost to the winner is only his time invested, not everyone else's. Like playing the lotto, almost.

    --
    If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
  39. Re:why not by athakur999 · · Score: 2
    This page has this statement:

    In United Devices Public Good Projects, rights to the research results remain with non-profit or government organizations that are dedicated to disease-fighting research.


    Not sure exactly what that entails but it seems like the results will be freely available if you fall into one of those camps.
    --
    "People that quote themselves in their signatures bother me" - athakur999
  40. Surprised they're going on. by ruebarb · · Score: 2

    I'm surprised the distributed team is thinking of going to the RC5-72 bit challenge. Even with the average CPU speeds increasing, it'll take another 5 years probably to crack it.

    Given the payout for this stuff, I'd have expect some expert cryptographers are working on the 128 bit algorithm, looking for cracks to reduce the brute force time...that's what I would be doing at this point had I the skill...not focusing on the crummy brute force attacks....

    --

    ----------
    ah honey, we're all resplendent - Bill Mallonee
    1. Re:Surprised they're going on. by compwizrd · · Score: 2

      2 ** 72 / 2 ** 64 = 2 ** 8 = 256

      256 times as many keys, going to take a lot more cpu time than that, especially with a lot of cpu's running the OGR challenge instead of RC5

  41. Lets see $10,000/1million= :( by Brigadier · · Score: 4, Funny


    In further news all participating Distributed.net users will be issued a check for 1 Cent.

  42. Something worth while by LoudMusic · · Score: 2

    How about we all focus our attention to something worth while now? Seti is cool, but we don't have any direct and imediate gains for finding alien life a billion light years away. The information we'd be communicating would be ... a billion years old.

    How about Cancer research? It's already been proven beneficial.

    http://members.ud.com/about/getting_started/

    UD!! Sign up today and get cracking!
    (unfortunately they only have win32/intel clients, doh!)

    ~LoudMusic

    --
    No sig for you. YOU GET NO SIG!
  43. Isn't this contest illegal under the DMCA? by gosand · · Score: 2

    Wouldn't a contest like this be illegal under the DMCA? True, the company sponsored the contest, and asked that you try to break it, but technically speaking, couldn't they be prosecuted for it? It was for research, but the DMCA is so vaguely worded that I think that this contest was illegal.

    --

    My beliefs do not require that you agree with them.

  44. Re:Yea!!! by FyRE666 · · Score: 3, Insightful

    ASCI White (or, even better, Japan's new super computer) could probably crack RC5-64 in a matter of hours.

    Hardly. We're talking about a third of a million participants taking 4 years here. Unless someone's developed a time machine and built ASCI from some future technology it's not that fast! (remember, many participants were science labs or other groups utilising several, sometimes hundreds of machines).

    Now we should see project OGR really kick into gear!

  45. Re:Yea!!! by mcg1969 · · Score: 2, Insightful

    I remember when this first started out they believed it would take about 1000 years to crack.

    Probably because the scalability of a distributed computing system was underestimated. Know this, it took a boatload of CPU time to crack this thing---just as predicted. What was not properly estimated was how much parallelism would be achieved.

    There's a lot of interesting information that comes from this aside from the actual problem being attacked.

    From a cryptography science, none at all. This project added absolutely nothing to our knowledge of cryptography.

    All of the interesting information learned was in the area of designing, organizing, and managing a distributed computing network, and the potential CPU power such as system could harness. That exact same knowledge could be gained attacking an exhaustive-search problem with some genuinely useful outcome, like protein folding perhaps.

  46. G4 800 faster than Athlon 2Ghz?! by FyRE666 · · Score: 3, Informative

    Our peak rate of 270,147,024 kkeys/sec is equivalent to 32,504 800MHz Apple PowerBook G4 laptops or 45,998 2GHz AMD Athlon XP machines

    Am I missing something here? Are they claiming the 800mhz G4 is over 1.4 times as fast as an Athlon 2ghz??

    Looks like the writer has been exposed to the "Steve Jobs reality distortion field" for a little too long...

    1. Re:G4 800 faster than Athlon 2Ghz?! by class_A · · Score: 2, Interesting

      No, just that AltiVec(TM)*, the PPC SIMD engine, is shit hot.

      *also referred to as VMX by IBM and Velocity Engine by Apple

    2. Re:G4 800 faster than Athlon 2Ghz?! by discstickers · · Score: 4, Interesting

      I can attest to that from personal experience. I have a PowerBook G4 500. My roommate last year had a custom-built P4 1.4 GHz.

      I was able to do around 4 million keys/sec. He did around 2 million keys/sec. So, clock for clock, my computer was 4 times faster than his.

      Yes, the advantage was because of the Velocity Engine(ake VMX aka AltiVec), but I does show the power of the G4 when it is programmed for correctly.

      --
      I have a shitty sig!
    3. Re:G4 800 faster than Athlon 2Ghz?! by chrysrobyn · · Score: 4, Interesting

      Am I missing something here? Are they claiming the 800mhz G4 is over 1.4 times as fast as an Athlon 2ghz??

      You're not missing anything. For some coursework when I was in school, I ended up sending some e-mail to the dnet staff. I mentioned that I needed to design a processor on an FPGA for a class, and asked what would be "ideal". They basically said, "Take Motorola's 7400 specs, that's the ideal processor."

      The Velocity Engine / AltiVec / VMX engine really was good at processing multiple keys (2?) simultaneously, and conducting the XOR rotates in record clock cycles (if I remember correctly). The processor architecture itself is mostly 1993 technology (PowerPC 603), but the vector engine is what makes it worth its weight in sand for some specific tasks.

      Now, what will I do with my dual 500MHz G4?

    4. Re:G4 800 faster than Athlon 2Ghz?! by be-fan · · Score: 2

      The altivec unit in the G4 has a vector permute unit that's really useful for RC5, less useful for other things.

      --
      A deep unwavering belief is a sure sign you're missing something...
  47. Re:Yea!!! by John_Booty · · Score: 3, Insightful

    Of course, ASCI White (or, even better, Japan's new super computer) could probably crack RC5-64 in a matter of hours.

    According to D.Net's press release, the peak rate achieved by D.Net on this effort was equivalent to ~46,000 2GHZ Athlon XP's working in tandem. Can even ASCI White or Japan's supercomputer match this sort of processing power?

    I'll admit that the RC5-64 project had very little practical use, but it was a heck of a proof-of-concept in terms of people's willingness to donate vast amounts of CPU time and the staggering amount of otherwise-wasted computing power that's out there and waiting to be utilized.

    I'd stuck with D.Net over the years even as more useful distributed applications cropped up, out of some sort of loyalty since I'd already invested so much (CPU) time in it. Now, I think I'll pick a more "useful" application like protein folding or something to occupy my spare cycles...

    --

    OtakuBooty.com: Smart, funny, sexy nerds.
  48. Re:Yea!!! by Phexro · · Score: 2

    "All bets are off though once we get quantum machines up and running...provided we can get around the whole heisenberg principle."

    Are you certain?

    <rimshot/>

  49. Interesting system comparisons .. by Draoi · · Score: 2
    From distributed.net's report;

    Our peak rate of 270,147,024 kkeys/sec is equivalent to 32,504 800MHz Apple PowerBook G4 laptops or 45,998 2GHz AMD Athlon XP machines
    Hmmmm..... ;)
    --
    Alison

    "It is a miracle that curiosity survives formal education." - Albert Einstein

  50. Re:Yea!!! by Bishop · · Score: 2

    Don't they teach math anymore?

    Based on the numbers from distributed.net. The actual computing power used is equivalent to 32504 800Mhz Apple powerbook G4s running for 676 days. With the same number of powerbooks you could exhaust the keyspace in 790 days. For 100 million dollars USD you could buy 100000 Dell Athlon XPs from BestCry and exhaust the keyspace in a little over a year.

  51. Re:Yea!!! by anthony_dipierro · · Score: 2

    So somehow has proven that given enough time, money and effort, RSA 64-bit encryption can be eventually broken using the amazing method of... BRUTE FORCE.

    Nope, we didn't even do that. We proved that given enough time, money, effort, and the first few characters of the decrypted message, RSA 64-bit encryption can be eventually broken using the amazing method of BRUTE FORCE.

    Want something more interesting? Compress the message with a really good english language compression algorithm first, then encrypt it.

  52. Re:Yea!!! by Blkdeath · · Score: 3, Interesting
    Hardly. We're talking about a third of a million participants taking 4 years here. Unless someone's developed a time machine and built ASCI from some future technology it's not that fast! (remember, many participants were science labs or other groups utilising several, sometimes hundreds of machines).
    We're still talking about machines that don't even hit a single GFLop, whereas ASCI White clocks in at a paltry 7.2TFlops, while Japan's Earth Simulator runs at a tidy 35.86TFlops.

    Not to sound too black-helicopterish or anything, but these are only the supercomputers that we know about.

    Isn't it entirely possible that in the interests of tracking "terrorists", the Department of Homeland Security might just have assembled something that makes E.S. look like an old laptop?

    The technology exists, it's just a simple matter of somebody (read: corporation / government) with the funding and wherewithall to put it together and make it function.

    --
    BD Phone Home!

    Shameless plug. Like you weren't expecting it.

  53. Re:i cant even pronounce this number by JUSTONEMORELATTE · · Score: 2

    Millard? Puuleeez!
    But there is a differing on the use of trillion
    Trillion:
    1. The cardinal number equal to 10^12.
    2. Chiefly British. The cardinal number equal to 10^18.

  54. No. by yerricde · · Score: 2, Informative

    True, the company sponsored the contest, and asked that you try to break it, but technically speaking, couldn't they be prosecuted for it?

    The DMCA's circumvention ban applies only to access control mechanisms on copyrighted works, when such mechanisms are broken without authorization. The RC5-64 encryption is not an access control mechanism on a copyrighted work.

    --
    Will I retire or break 10K?
  55. What? by pclminion · · Score: 2
    The only way to crack a one-time pad is to acquire the pad. PERIOD. It doesn't matter if some guy writes a book claiming it can be done. It CANNOT be broken without the pad, no matter how many computers you have -- hell, you can't even break it with a QUANTUM computer.

    There's actually a copy of the book sitting on the shelf here. Can you refer me to a page number where this bullcrap takes place, so I can debunk it?

  56. Clients turn off? by Jon+Shaft · · Score: 2, Interesting
    Well aparently the keyserevers are shut off. I have all my rc5 installations set to JUST do rc5 and not DES or OGR... and one more that I can't think of off the top of my head.

    Anyhow, my client just starts, tries to connect to the server and gets and error message like the following...

    [Sep 26 17:32:37 UTC] NetUpdate::Connect handshake failed. (0.168)

    So atleast it's not going to sit there and make up random keys anymore. It may have been a slight security risk (possibly) but maybe dnet should've sent a special request that would show a little message when you click on the cow (or make the cow change color so you would click on it.. ie Chocolate cow) so you'd know to uninstall it if you wern't paying attention to the news.

    Oh well, I've been doing rc5 since my junior year of high school and have a lot of memories of installign in, uninstalling it, taking over a friends install, and him taking over mine. It was a lot of good times for this little silly program... installing it on all the computers in high school was a blast. It was truly a great forum to bring a lot of geeks together. The Slashdot team, 2600, FreeBSD and Linux Groups... all competing in a silly encryption game. :)

    --

    Who's the black private dick, who's a sex machine for all the chicks?

  57. Re:False positives in RC5-64 - SO IS NEXT? by BovineOne · · Score: 3, Interesting

    Depending on the speed of your machine, OGR stubs may indeed take a very long time (many hours typically). If you have a relatively slow machine, this may indeed keep your machine busy for more than a day--just be patient. The individual size of each OGR workunit can varies greatly from one workunit to the next, by design.

    --
    Don't waste those cycles! Put them to use! http://www.distributed.net/
  58. Decrypt the solutions yourself by BovineOne · · Score: 2

    Here are some Perl scripts that make use of a modified version of Crypt::RC5 to decrypt the RC5-64 solution, the RC5-56 solution, and the RC5-64 false-positive.

    http://www1.distributed.net/~bovine/perl-rc5/

    --
    Don't waste those cycles! Put them to use! http://www.distributed.net/
  59. Portion of Internet's data by mmol_6453 · · Score: 2

    Wait a second...didn't I just see an article on Slashdot about how the Internet transfers about 2 TB of data per day?

    105GKeys/sec * 8 bytes/key / 2TB/day * 86,400 sec/day * 100% = 35,437.5%

    Those numbers don't add up. If, however, I change 2TB/day to 2TB/sec:

    105GKeys/sec * 8 bytes/key / 2TB/sec * 100% = 41% of the Internet's traffic.

    There's gotta be something a bit off here...My mind just doesn't want to register that almost half of the internet's bandwidth is part of a massive computer cluster.

    --
    What's this Submit thingy do?
    1. Re:Portion of Internet's data by Papineau · · Score: 2

      Since the keys are sequential, you just need to give a 64 bits value to clients, plus the length that the client should check. Same thing on the return trip: start, length, result (yes/no), who (for stats). Of course it was all encrypted, so it was a bit more than those values per packet, but nowhere 105GB/s or some other insane numbers.

      All in all, it's a quite small portion of the total Internat traffic. I recall an article on Slashdot about a guy in Atlanta who secretly installed the client on state's computer, and was fined for that. IIRC, it amounted to something around 100K$ per MB, or something like that (of course the fine wasn't only for the bandwidth used).

    2. Re:Portion of Internet's data by cdrudge · · Score: 2

      Your assuming that they transmit every key in it's entirety. You could easily tell each client check the keys in the range of 0x0000 through 0x0FFF, another 0x1000 through 0x1999. So instead of sending 1000 keys @ 8 bytes each, you only have to send 2 keys (start and end) @ 8 bytes. Larger groups would obviously cut down the transfers even farther.

      You also don't take into consideration compression.

    3. Re:Portion of Internet's data by mmol_6453 · · Score: 2

      Out of curiosity, what happens when a winner(or false positive) is found? Does the client return the key, or just the fact that the key was found in that block?

      --
      What's this Submit thingy do?
  60. Re:D-net's site..... by Nugget · · Score: 2

    Now I'm glad I shaved today and wore a (relatively) nice shirt.

  61. Re:all I want to say now is by Nugget · · Score: 2

    Cows are cool. ]:8)

  62. Re:hmmm by GMontag451 · · Score: 2
    Thats easy, just open a doorway in the wall with a time machine.

    Look's like I'm the only one here that got that reference.

  63. Re:are you going to the meetup? by Nugget · · Score: 2

    There is no "guy who made distributed.net" -- it is and has always been a collaborative effort and the product of many people's time, energy, and dedication. Even cow, himself, the reason the project was named the "Bovine RC5 Effort" (in February 1997) doesn't try to take credit for it.

  64. Re:MOD PARENT DOWN!! by Eil · · Score: 2


    Idiot. The OP is one of the founders of distributed.net and has something interesting (in my opinion) to say. I only saw one other thread in this article dealing with false positives and BovineOne added to that thread *after* he made this post.

    Please go be a moron elsewhere. You aren't wanted.

  65. known plaintext... by Nugget · · Score: 2

    Peter Trei (the RSA mind behind the secret key challenges and the article submitter for this story) explains that the secret key challenges (DES, RC5-foo) were designed to mimic the structure of an attack on captured IPSEC traffic where one could similarly search for valid or recognizable header information.

    Rather than being an unrealistic excercise, the method used to brute-force the RC5-64 and other RSA Labs secret key challenges is actually relevant for this very reason.

    The scenario is not as improbable as you imply.

    1. Re:known plaintext... by Nugget · · Score: 2

      Perhaps you meant to say "instance", not "implementation". In either case, my point stands.

  66. Might be time to retire my 386 by bluGill · · Score: 2

    I just remembered I have a 386-25 sitting on a shelf, telnet in, and sure enough, it is still running the dnet client. (This before OGR clients) Linux 2.0.36. Looks like the power company decided to reboot it 20 days ago. Nice little headles machine running off a 80Mb harddrive. Did something like 2 blocks a day.

    Here's to old machines, and an operatoring system that can keep them running for years! Thank you Linus, and all the other hackers that went into making linux stable.

  67. Sure, switch to seti... by Nugget · · Score: 3, Funny

    You just wait and see who has the last laugh when SETI@home manages to detect an alien signal only to discover that it's rc5 encrypted! :)

  68. Re:Yea!!! by unicron · · Score: 2

    The Heisenberg Uncertainy principle basically states that their is no such thing as a truly closed system. Rough explanation is this: You can't look at something/anything without changing it somehow. In this application, the results gathered from a quantum computer wouldn't be accurate because to obtain them, you had to observe, and therefore changed something, no matter how small.

    --
    Finally, math books without any of that base 6 crap in them.
  69. Re:Can someone explain the missing bit? by Amazing+Quantum+Man · · Score: 2

    I can't tell if you're a troll or not.... It has a leading '0'.

    011000111101111001111101110000010101010011110100 11 01000000111001 (ignore the slashdot space behind the curtain).

    --
    Fascism starts when the efficiency of the government becomes more important than the rights of the people.
  70. Re:hmmm by Amazing+Quantum+Man · · Score: 2

    But why did you send me a bill for finding my cat?

    --
    Fascism starts when the efficiency of the government becomes more important than the rights of the people.
  71. This is a good question... by VValdo · · Score: 2

    Is anyone knowlegable enough out there to take a guess at how much power may have been used for this project in the last four years and how the energy consumption translates to pollution?

    For help, consider this discussion.

    Of course, to calculate this, there are some assumptions that have to be made-- how many machines were on solely for the purpose of cracking keys, how much energy on average does a machine use, and what percentage of that is used by the processor when cracking, improvements in keycracking speed and energy efficiency over four years, etc.

    Anyone up for it?

    W

    --
    -------------------
    This is my SIG. There are many like it, but this one is mine.
  72. Running dnetc on the graphic hardware by FyRE666 · · Score: 2

    What I always thought would be cool would be to figure out how to run it on my GeForce2 card using the triangle processors when I'm not playing Quake

    Probably not an option with the GF2, but I wonder if more recent chipsets could actually be used in this way? Could the data be fed in and pushed back out?!

  73. Re:Yea!!! by Bishop · · Score: 2

    My bad. It was a Compaq not a Dell. It is a single XP 2100+. You can deffinately go cheaper. You probably can get the same result for half that. Cheaper still if you built dedicated hardware.

  74. No, mod parent down! by KFury · · Score: 2

    Love/hate the sig. Very creative...

  75. 128-bit SSL is safe ... by ghazban · · Score: 2

    Assuming you don't use it with a web browser - the fundamental flaw.

  76. LOST: RC5 block crunching machine by EvilStein · · Score: 3, Funny

    I left a machine turned on at one of my former jobs, and it's crunching rc5 blocks still.

    I HAVE NO IDEA WHERE IT IS!

    Is there any way to find out where the rogue machine is? heh..
    It's submitting about 200 blocks a day. I just wish that I could FIND it...

  77. Yes, it was worthwhile. by _xeno_ · · Score: 2
    OR:

    We learned how to create a giant distributed network and how to divide large amounts of computationally intensive work to potentially hostile clients in such a fashion so as to ensure that blocks of work were actually completed, allowing newer distributed networks that actually attempted to solve better problems.

    Distributed.net was interesting because of the method, not because of the actual solution. Yes, we knew it would be possible. But this really shows that it is indeed possible to create a working implementation, and that people very well might be willing to give away CPU cycles to a common goal. Yeah, breaking RC5 may not have been that interesting or useful, but demonstrating and creating a functional distributed network definately is.

    --
    You are in a maze of twisty little relative jumps, all alike.