So if you're smart enough to not use The Cloud™ and instead buy surplus hardware, it should be possible to crack 64 bits of symmetric crypto in a few weeks for ~$10k in one-time costs (and just power for any repeat runs).
Show this thread
So the SHA-1 collision guys say
"As a side result, this shows that it now costs less than 100k USD to break cryptography with a security level of 64 bits (i.e. to compute 2^64 operations of symmetric cryptography)."
But @tmbinc already cracked 56 bits for $1k 9 years ago.
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
DES only it seems?
End of conversation
New conversation -
-
wouldn't it be exponential with regards to the difference in bits, not linear?
-
Yes, but tmbinc did it in a week. The SHA-1 thing took 8, so that leaves a factor of 32. Factor in tech improvements and 10x cost sounds about right.
End of conversation
New conversation -
-
-
Not to take away from
@tmbinc’s nice work, but wasn’t he bruteforcing incrementally and the top 16bits were like 00 11? Hence the success occurred very early on in the bruteforce as opposed to a key that starts with FF EE. -
He got lucky on that, but the system was designed to bruteforce the entire keyspace in a week.
End of conversation
New conversation -
-
-
Renting compute combines power and time into one number though. How long does it take on physical hardware?
-
It should be doable in the same amount of time for ~$10k give or take.
- Show replies
New conversation -
-
-
sha1 chosen prefix collision != des hashing. Its like comparing granny's coffee table with a snowman.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
Show additional replies, including those that may contain offensive content
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.