mersenneforum.org Poly select and test-sieving for RSA232
 Register FAQ Search Today's Posts Mark Forums Read

 2020-01-06, 21:34 #24 VBCurtis     "Curtis" Feb 2005 Riverside, CA 24·347 Posts The MurphyE score depends on other parameters that you didn't list. You also didn't list the polynomial, so I can't evaluate its quality myself. You didn't list the large-prime bound parameters, nor lim0 and lim1, so I can't tell you how good or bad your param choices are. I'd change I=16 to I=17, for a start. If you know it is too large, why are you trying to factor it? Your machine isn't capable of finishing the job. EDIT: Sorry, I had in mind a 768-bit number, not 1024-bit. When the CADO group solved RSA768, they spent about 20 core-years on poly select. You spent 1 core-year (100 days * 4 cores, as a guess). So, you're about 5% of the way to "enough" for a number 1/1000th the difficulty of the one you're trying to factor. So, a mere 500000 more core-days of poly select should be about right. Then, the sieving might take 20-30x that long, depending on how good your parameter choice is. Your parameters are in the ballpark of decent for a 768-bit number, though. Last fiddled with by VBCurtis on 2020-01-06 at 21:58
 2020-01-07, 01:57 #26 VBCurtis     "Curtis" Feb 2005 Riverside, CA 24·347 Posts You're missing the point entirely- you have copied / used parameters from either RSA768 (a 232-digit number) or RSA-240. These are, you know, SIXTY or more digits smaller than the number you wish to factor. If you tried to use good parameters from a 180-digit job to factor a 240-digit job, they would fail miserably. So will yours, for the same reasons. 1. You're not getting any relations because the siever is too small. You need I=18 for a kilobit number. One instance of this siever requires 120GB or more of memory. 2. You don't know what you are doing, so you don't know how to scale any of these settings for this job. Since this job is impossible for you to complete, this doesn't matter a whole lot; but if you happen to be pals with Ben Delo and share his level of hardware resources, you would factor a 140 digit number, then 160, then 180, then 200, then 220 and see how the settings change and memory needs change and time requirements change. Then you and Ben would realize 1024-bit GNFS is not a good idea, but maybe 250-digit GNFS is possible (it is). 3. There are discussions scattered around about trying to factor RSA-1024. You should find these papers or forum posts for ideas about how big a job this is, and what settings might be reasonable. Things like 4 large primes on one side & 3 on the other, 42-bit large primes (or 43, or 44- how much disk space do you have?). Once you have 20 or 50 TB of disk prepared for this task, then you can decide how to write a grant proposal to get access to a cluster with, say, 512GB of memory per node to attempt the postprocessing. That matrix might have a billion rows and a billion columns. In closing, your settings *might* factor a 230-digit number in some reasonable number of decades, but they won't factor a kilobit number before you die. EDIT: I pasted your poly into cownoise to see what its score was. Results: optimal skew 8832525.55458 score 7.74032539e-22 Last fiddled with by VBCurtis on 2020-01-07 at 02:16

 Similar Threads Thread Thread Starter Forum Replies Last Post amphoria YAFU 22 2016-09-17 09:47 VBCurtis Msieve 0 2016-04-11 21:33 jux YAFU 5 2016-01-02 01:01 EdH Factoring 10 2013-10-14 20:00 nstaab1 Lounge 15 2013-03-06 13:48

All times are UTC. The time now is 18:53.

Sun Dec 4 18:53:57 UTC 2022 up 108 days, 16:22, 0 users, load averages: 1.17, 1.09, 0.98