Factoring RSA 260

Posted by samyok 3 days ago

Counter132Comment18OpenOriginal

Comments

Comment by dang 2 days ago

Recent and related: RSA-260 Factorized - https://news.ycombinator.com/item?id=49546284 - Sept 2026 (77 comments)

Normally we'd downweight a follow-up [1] but this is a good article and arguably adds SNI [2] in its own right.

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...

Comment by herf 2 days ago

One problem is that the core-years for RSA-250 were in 2017 Skylake Xeon single core terms.

If you can rent a dedicated 96-core Epyc for $1/hour (cheap dedicated host), the combination of IPC improvements (>2x) and core count make 7,010 "skylake core-years" cost only $175k, not $5M. On-demand cloud servers (which cost more than $1, maybe $5/hour) probably make the GPU cheaper, but it's closer than the author says.

Comment by Retr0id 2 days ago

I think this is the first time an "I made an agent swarm do something" blog post was actually written by a human, what a breath of fresh air.

Comment by 2 days ago

Comment by big_toast 2 days ago

"I estimate that this factorization cost about 4,900 GPU-days, or 13.5 GPU-years, which is about $400k at current market prices"

"factorization ran at no marginal cost on spare or fragmented compute that couldn’t be used for other purposes"

Interesting use of stranded compute.

Comment by schoen 2 days ago

I'm confused by this because I was involved in various distributed computing projects from about 1997 to about 2001 (as a person running compute notes for them) and from about 2001 to 2019 (as a person helping to administer a distributed computing related prize), and in the early part of that era we routinely talked about idle computer power as "wasted" because of the idea that the computer might as well be used to compute something rather than sitting idle. This may have been very credible in 1990s devices that consumed a roughly comparable amount of power regardless of what specific computation they were performing, but all modern devices have extremely variable power consumption depending on the load. You can easily feel this as devices have fans turn on or get hot when the CPU is loaded, and in many cases you can easily query the CPU with software to find out how its power consumption or clock rate or other factors get adjusted based on computational load.

This means that the idea that idle compute would have gone to waste is just no longer true on modern devices.

Now there is certainly compute that couldn't be sold to a paying cloud customer because it's too fragmented in some sense, but it still has some amount of energy cost, and, in a data center, corresponding cooling cost attributable to the marginal heat production. How can one actually say that there is literally no marginal cost at all? I just can't imagine a device that literally has the same power draw regardless of load factor!

Comment by ball_of_lint 2 days ago

If it's cloud compute that would be otherwise unused, the business is not paying for the electricity or wear. And they specifically put it in terms of marginal cost - Yeah there'd be an improvement from reselling this idle compute instead, but just using the cycles that would otherwise have been wasted doesn't change the status quo.

Comment by schoen 2 days ago

In the sense that the company paying to reserve a certain quantity of computer time isn't the owner or operator of the machines providing it, and has paid for that time by the hour, or something?

Comment by ericpruitt 2 days ago

Yes. Most cloud provider bill based on wall clock time rather than core time, so you don't get a discount for the machines being idle.

Comment by schoen 2 days ago

I see, so there is a marginal cost to the owner of the machines but not necessarily to a medium-term customer renting them.

Comment by 2 days ago

Comment by 1 day ago

Comment by brohee 2 days ago

The discussion on the cost of the attack needs an addendum. The lattice sieving part would be free for an an attacker with a big enough botnet or enough cloud computing stolen credentials.

Maybe it could even be practical to run it on browser in parallel to video streaming on a free video site...

Comment by mkmk 2 days ago

This is so well written as to be refreshing

Comment by sigmar 2 days ago

Were the agents ever tasked with algorithm improvements? Post just says he didn't find any ("report essentially no algorithm advancements"). These LLMs are useful for optimization tasks where they can attempt a change and then measure performance boosts, so just wondering.

Comment by Fredkin 2 days ago

Any comparison on the sieve to G6K ? If it's good, you should probably try a few of these https://latticechallenge.org/

Comment by quietraster 2 days ago

using the factoring run as a scheduler stress test is a fun flex. how much of the gpu lattice sieve ended up written by the devins vs by you?

Comment by bleepblap 2 days ago

Who is Devin and why do they listen to the author?

Comment by thaumasiotes 2 days ago

My guess would be https://devin.ai/

Comment by rurban 2 days ago

Formerly called Windsurf. https://devin.ai/blog/windsurf-is-now-devin-desktop This should ring a bell

Comment by rao-v 2 days ago

Devin … now that’s a name I’ve not hear in a long time

Comment by axionbraid 2 days ago

[flagged]