Another Distributed Computing Effort: CSC
Armin Lenz writes "DCypher.Net, a newly formed distributed computing effort, takes up french encryption specialist CS Group on their challenge to break their 56 bit CS-Cipher key.
After successfully completing beta testing, the project officially launched Monday, November 8. During the first days only basic stats will be available, but contributors are invited to download the final client and start work asap.
"
Since distributed processing forms a virtually limitless computer system, will all our personal computers of the future be simply devices that share processing power?
We're here to give you an OS, not a religion.
Unfortunately, the only clients listed are all Windows clients.
If only a Linux or BeOS client existed, I'd be glad to lend a few extra CPU cycles. As demonstrated by both SETI@Home and Distributed.net, non-Windows clients tend to run faster and with fewer problems - meaning this would probably be cracked faster than the pure-Windows user base.
Oh well. I suppose we have to enlighten the world one step at a time.
What an excellent prize! 10,000 gyros. I could live off of those for years! Oh.. wait.. they said 'Euros'. Pfft. Nevermind. *sniffle* =)
--
In the same fashion that a GUI can't do everything a CLI can do (and vice versa), you must choose the best tool for the job - not necessarily the 'trendiest' one.
--
This does nothing that hasn't been done before. Distributed.net already has huge amounts of effort put into brute forcing 56-bit encryption and has already checked 15% of the keyspace. I fail to see any benefit comming from this.
Our spare cpu cycles are already spread thin enough between seti@home and RC5, why spread them even thinner?
dox
Oh, just what the world needs. Another Distributed Computing effort.
Wouldn't our time be much better spent trying to co-ordinate all of the current efforts, rather than simply reduce the computing power available to each one by throwing another into the pot? There really is a limited number of computing power available. There are a limited number of people who would want their extra CPU cycles, extra as they be, to be used that way. Adding another "let's brute-force a crypto key" effort into the pot seems to have no point other than to slow down the work of all of the other efforts out there.
- Drew
- In Capitalist America, law violates YOU!
I am suprised that they started beta with a windows client. I figured a quick and simple unix client that could be ported to windows would be the best. Drop the gui, add the functionality.
We are cracking codes here, not drawing pretty pictures.
Also, with the rise of linux and other OS's in europe, I am suprised they took this intial route.
Oh well. It will be there loss of CPU power.
-I just work here... how am I supposed to know?
These distributed projects are all very well, but can one have too much of a good thing? How many people will take part in each one, I wonder, if they become commonplace?
11.0010010000111111011010101000100010000101101000
We already know that a distributed computing project can exhaust the keyspace for 56-bit keys in a reasonably short time. Regardless of the encryption algorithm, a 56 bit key can be broken. So why bother with this particular algorithm?
This is all just a publicity stunt by CS. Their description of the "CS-Ciper Challenge" states that the purpose of this exercise is to demonstrate that brute force is the only possible attack against their algorithm, which is absurd. Either the message will be decrypted by brute force, which just proves the obvious fact that brute force attacks are possible, or it will be decrypted by finding a cleaver attack on the algorithm. If no attacks are found, that only means that no attacks were found, not that there are no possible attacks against this algorithm.
Sheesh. Maybe I'll start a contest to prove some other negative.
That's "Mr. Soulless Automaton" to you, Bub.
Dcypher is not distributed computing, it's client-server, as are SETI and d.net. There is a HUGE difference between client-server and distributed computing. Perhaps slashdot should label it cooperative computing instead.
Actually, there is another distributed computing effort under discussion on the mailing list nanodream@egroups.com.
The idea is to design a nanotech computer. All things considered, it might be worthwhile since molecular electronics could provide us with the computing power we need to make future distributed computing projects unnecessary.
It's impossible to say for sure, but can someone give me an esimate as to how long this is going to take? RC5-64 has been going on for two years and has consumed about 15% of the keyspace, please tell me this is going to be faster. The keyspace is smaller, but how fast is the decrypt algorithm?
I know - it's impossible to say for sure, but can someone give an esimate as to how long this is going to take? RC5-64 has been going on for two years and has consumed about 15% of the keyspace, please tell me this is going to be faster. The keyspace is smaller, but how fast is the decrypt algorithm?
Here is how it would work: You start up a company who signs up people to run a generalized client in the background in exchange for some kind of benefit or even a small $$. Then you sign up customers who need access to lots of computer power. The clients on the desktops detect and download the program and the data and chew away at their little bit.
Once the effort is completed, your customer is happy and you get your $$. It would be like a virtual Supercomputer, only massively parallel.
-- Dr. Firmware
Dear all,
As one of the designers of CSC (together with Serge Vaudenay), I am very happy that Dcypher has decided to accept the CS-Cipher challenge. Good luck to all participants. We believe that the computation is feasible and that it will be a useful indication of the strength of the "real" cipher. We recommend, of course, 128 bit keys, which can now be used almost freely in France, as well as in many other countries.
Jacques Stern
It's good to see another project starting up in the distributed field. I hope that this won't turn into a huge dcypher.net vs. distributed.net flame-war (although hints of this are already surfacing on EFNet). I think two contests pushing eachother forward, trying to create the most optimized clients etc. will be a good thing in the end. Hopefully it won't get pulled down by a lot of territorial "we're better than you" fanatacism...
In Soviet Russia...michael would be rotting in Siberia!
Moo!
Although some competition would be great among the distributed computing projects, dcypher.net seems to have picked a bad contest to try and get off the ground with. Perhaps more of a "marathon" challenge would be optimal, instead of the "sprint" that CSC provides.
We had already announced our intent to do CSC, and have an enormous amount of computing power in comparison to the newly-formed dcypher. Dcypher really can't expect to beat us to the CSC key, and after one unsuccessful challenge, their users will likely be unmotivated to stay around.
At this point, our CSC/OGR clients are only in a beta testing phase; however, based on the few hours that we've been running this public beta, our key-checking rate is at least twice that of dcypher. We'll probably be releasing the final clients in the next week or two, and at that point, our rate will be large enough that we should be able to exhaust the entire keyspace in a few weeks.
Daniel
--
Daniel Baker - dbaker@cuckoo.com - dbaker@distributed.net
I don't mean to sound like a money grubber, but what is the prize distribution going to be like (ie: how much goes to the lucky keyfinder and how much to dcypher.net)? Also, how much in US greenbacks are 10,000 Euros? I couldn't find any mention of either on the dcypher.net website.
Distributed.net is running through CSC at about 120 Mkeys/sec. Does anyone know where to get a total keyrate from Dcypher.net, and how to convert their "Mbytes/sec" to a keyrate?
Since I've been participating in the distributed.net RC5 project, I've wondered if it would be possible to create a generalized distributed computer. People would write software for a virtual machine and the clients would automatically connect and process different applications. There could be some sort of queue system or time limit to ensure that everyone had a chance to use the virtual computer, or maybe applications could get voted on.
To keep client machines active the distributed system could offer prizes or even payment depending on number of blocks processed.
This may be able to tackle such stuff as raytracing or similar "problems" that could be handled within the environment.
Now, perhaps I'm just being paranoid, but sounds too much like a great opportunity for data mining to me. Especially when you consider that a) you will have to register some user information so they can track your computational contribution and that information will of course be attached to all data the client sends back and b) you're never going to see the source code for the client, and since you're probably going to be sending back blocks of funky not-really-decrypted text, sniffing the datastream isn't guaranteed to root out any other information they might have coded up and embedded in that data.
I don't know who these people are, but the fact that they're offering for-pay advertising at the very beginning of the project just doesn't bode well. They might have good intentions, but how far will those last when some advertiser offers a check with lots of zeros in exchange not just for banner space but also for the list of usernames/emails of the people running their client?
If a project is going to ask for information about me, as any distributed computation project is almost certainly going to want to, then they just need to stay out of the whole Advertising for Dollars game, especially in the digital world where it's so hard to see what exactly they're doing with your data.
-=-=-=-=-
-=-=-=-=-
My mom's going to kick you in the face!
Why didn't the authors instead submit their code to distributed.net to have the distributed.net client process this new project? We all have distributed.net's clients (in the sense that one exists for just about anyone). Another group trying to make a name for themselves but not being inter-compatible ... would be nice if people joined projects instead of creating new ones for a change.
- Michael T. Babcock <homepage>
- Michael T. Babcock (Yes, I blog)
As far as I know, none of these distributed computing efforts release their source code. I understand that they have reasons for this, but I still have no intention of running any code on my machine for which I cannot see its method of operation; especially given the recent scare over Real sending back 'interesting' data from their servers.
So, are there any projects which do have full open source clients? I'm not necessarily so worried about their freeness or otherwise, I'd just like to know exactly what they're doing.
Perhaps we have picked the wrong contest to win, but I think our performance in preparing for this contest will reflect well on our abilities and encourage future participation with our efforts. We have constructed the infrastructure necessary to participate in this contest within less than two months, and are still continuing to improve. Our transition from beta to release before distributed.net should be viewed as a commitment to meeting deadlines, not simply a two week head start. If distribued.net experiences large participation in CSC, we stand little chance of winning. But if distributed.net stumbles the door is left wide open; they could certainly stumble by not offering as much prize money, not having gui clients, or maybe just not having the management tools to switch around all their wonderful cpu power. I think at best, the future of this contest is uncertain. We are currently negotiating with 2 other groups that are interested in the infrastructure we have put in place, so i think we will be around for a while longer, no matter the results of this contest. The growth we have experienced since our launch is impressive. Even if your beta is doing better at this point, I doubt that will be the case for very long. Chris Harrison Chris@dcypher.net
2 years? What is d.net hoping to prove? Are they just interested in spending furious amounts of energy processing needless keys?
Personally, I spend my computer's idle time finding mersenne primes. Seems a bit more worthy than beating a 2 year old dead horse.
Why the heck is everyone so up in arms about this?
Finally, months after the CSC was launched, *someone* has a client out to work on it. That someone isn't distributed.net. And that's why you all are so mad. d.net isn't the guru of distributed computing.
If d.net hadn't piddled all this time away on rc5, they could have had the thing almost done.
Instead *they* spread themselves too thin over CSC, OGR, RC5, etc...
The heck with d.net. The heck with waiting and waiting and waiting for non-functional beta clients. Finally, the real deal.
ok so, no linux client? come on! im sure we all have dos machines at work? right??? come on!! i want to see a team happen! its /. team or nothing... well certainly not anandtech (nothing against you guys)
----====___SUBLIME___OR___NOTHING___====----
The ECDL project has GPL-ed source code. Plus it involves actual mathematics, not just brute force.
It has given $12000 of prize-money to the Free Software Foundation.
The next challenge starts in a few days and will give $8000 to the Apache Software Foundation.
It's at http://cristal.inria.fr/~harley/ecdl/
not that close to first post!!!!
I've looked through the dcypher website twice, and haven't seen any mention of the 10,000 Euro prize, or how it is divided. I'm not in this thing for the money, but before I'd consider running a dcypher client, I want to know how the money is being distributed.
Obviously the main motivation to switch projects is greed in this case. While this may be morally devoid, I have to admit, it tempts me. Now, I'm not totally against giving d.net part, to cover their costs and time, and maybe a small portion to another worthwhile charity, but do I want to give away 90% of the prize money? Not really... d.net does have other sources of income (iGive to name one relatively big one) and they ARE a non-profit org... I think being able to keep at least 50% of the prize money is fair, or having some sort of option. I like d.net alot, and probably will end up with them in the end, but if another group ends up attracting a large user base, AND their giving away a larger share of the prize... my morals may end up compromising a bit. Sadly, but honestly, Anonymous Coward
Perhaps these people were dissatisfied with the way Distributed.net was doing things and thought they could do it better. What's wrong with competition? You are the same people who say competition is GOOD in the operating system market (Windows monopoly anyone?), yet now you say competition is bad (One distributed computer under Distributed.net)
They've updated their website with news on the prize disposition. Here's the quote:
We'd be happy to win you over as a participant and give you the chance to win the full prize money of 10,000 Euros (roughly $10,500) for finding the correct key!
We sucessfully completed RSA rc5-56 challange October 22, 1997 (See our full history at http://www.distributed.net/history.html ), over two years ago. We are currently working on rc5-64, which is 256 times harder than rc5-56. Were we to tackle rc5-56 again, we could crack it in a matter of days.
dB!
decibel@distributed.net
Are those weeks real time, or DNET time? Because if they're DNET time, we're looking at months. While I will continue to support DNET, I can understand dissatisfaction with how things work.
On the other hand, it looks as if dcypher.net was made out of complaints about SETI's client. In which case, why didn't they just code cores for distributed and offer them up? It may have taken some time to get the core into the distributed.net client, but it would've been a better thing to do, IMHO.
And the website is eerily similar. It's kinda spooky. My main objection to the whole thing was their not saying how much of the prize money would go to the finder of the key. Now that they've done that, hmm.
From what I can remember, there was either something in one of the D.net head's .plan's or in a discussion in #distributed (efnet) about open source. The problem with sending fake keys back is one that was quickly resolved as good logs are kept of all keys going out and coming in. There was consideration of making the next generation of clients open source, I don't know where that went to.
I'd agree that it'd be nice to see what the client is actually doing, but I was content just to watch my outgoing network traffic for a day or two.
Also, why would a non-profit organization want to or need to collect info from people?
Just a few thoughts to ponder
NIVRAM
Then there'd be long term contracts with lower rates of pay, or short term jobs with higher rates of pay, and of course seasonal work (when for some reason or another there is a cyclic demand, aka the weather service needs some more power for the Hurricane season), and shortages or over-supply as the availability waxes and wanes, or as computing power increases... Don't forget the higher rates of pay for those of us with a lot better net connectivity, or more available disk space, which should enhance the type of tasks we can take.
What would be really interesting is what the pay would end up being, assuming we have the best 'programming' infrastructure available for 'clients'. Would it only be a tidbit, or could/would big business and other concerns really take advanatage of this cheap distributed power.
It would be neat if it would both allow companies to get cheaper than normal computing power, and yet at the same time completely paying off the entire cost of my computer. I don't see why it's not possible. Score!!!
A rule of bussiness that translates very well to an internet venture that involves more than 3 people is "the customer is always right." If you are soliciting customers (users computers) and you have some users that say they think the client should run full screen 3D and flash then if you value those nuts..er I mean customers then you bust ass and make one. A company that thinks they dont have to listen to their customers either goes out of business or makes their owners quadzillioaires before the justice department jumps on them and cuts the jugular. You make sure you never make a customer feel inferior or you have just lost a customer. I decided to try dcypher and so far I see a couple of strikes in that there is no mailing list or anyway of posting bs type feedback. I would like to get a mailing or at least be on a mailing list of users to keep up with what is going on. Sense of community type thing that dnet has going on. If the only info comes from just four people that dnet mailing I get in that folder will be pulling me back. Great effort so far. Good Luck. Shadowze