Bruce Schneier | |||||||||||||||
Schneier on SecurityA blog covering security and security technology. « Reading RFID Cards at Yards Away | Main | How the French Spy on Their Citizens » January 23, 200643rd Mersenne Prime FoundLast month, researchers found the 43rd Mersenne Prime: 230,402,457-1. It's 9,152,052 decimal digits long. This is a great use of massively parallel computing: The 700 campus computers are part of an international grid called PrimeNet, consisting of 70,000 networked computers in virtually every time zone of the world. PrimeNet organizes the parallel number crunching to create a virtual supercomputer running 24x7 at 18 trillion calculations per second, or 'teraflops.' This greatly accelerates the search. This prime, found in just 10 months, would have taken 4,500 years on a single PC. Posted on January 23, 2006 at 3:07 PM • 36 Comments To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter. Not to discount the signifigance of this effort, but what's the use of finding these primes short of demonstrating human resourcefulness? Shouldn't we be using this processing power for folding proteins or the like? Posted by: Stephen at January 23, 2006 3:33 PM I believe you have talked about this before: Posted by: AG at January 23, 2006 3:58 PM Much of cryptography relies on being able to know prime numbers that are large enough that factoring a multiple of that prime number takes a long long time. In other words, all your cryptography comes out of the search for big prime numbers. Posted by: Alun Jones at January 23, 2006 3:59 PM Alun: Indeed, but these primes are waaay beyond what's even concievably required for crypto. Quite apart from anything else, for most crypto, the machines involved have to be able to generate their own (secret) primes, so a pregenerated prime that takes 7,000 computers 10 months to generate is of no use whatsoever. Posted by: Nick Johnson at January 23, 2006 4:13 PM > what's the use of finding these primes Mostly to the point: > This prime, found in just 10 months, would have taken 4,500 years on a single PC. If we're going to rely on cryptographic techniques to keep data secure, we should know how easy it is to brute-force attack those techniques. Posted by: Pat Cahalan at January 23, 2006 4:14 PM If we're going to rely on cryptographic techniques to keep data secure, we should know how easy it is to brute-force attack those techniques. Posted by: Nick Johnson at January 23, 2006 4:27 PM I suppose sometimes you just have to climb the mountain because it's there. Posted by: Davi Ottenheimer at January 23, 2006 4:38 PM > A simple calculation based on the method to be used can do that Sure. But you can definitely have a culture of: "This is secure, it would take a single PC 4,500 years to crunch it." I guess my point is that unless people see results like this, they don't necessarily consider implications. Sure, assembling a 7,000 computer node to attack something for 10 months isn't trivial, but it provides a reality vector. But you and Davi are right, it's essentially an intellectual mountain climbing event. Posted by: Pat Cahalan at January 23, 2006 5:28 PM It would seem that the point of this is, of course, to secure more grant funding for massively parallel computing. What you do with your massively parralleled computers is up to your funding sources and/or grantwriters. Posted by: BLP at January 23, 2006 5:49 PM @Bruce Posted by: jkohen at January 23, 2006 6:06 PM jkohen: He did! How else would you possibly expect to see a number "9,152,052 decimal digits long"? :-) Posted by: Evan Murphy at January 23, 2006 6:47 PM @jkohen How big were you expecting a 9-million digit number to be? Anyway, you don't need to download the file, just evaluate (2**30,402,457)-1 :-) Evaluating it is much easier than proving it's primt. Posted by: Thomas Sprinkmeier at January 23, 2006 7:25 PM @Davi: Can I climb 1/70,000th of the mountain? ;^) Posted by: Chris Walsh at January 23, 2006 8:18 PM @Thomas I know that's not what you suggested, but it would take a 14400 bps modem about this much time to download the whole file without compression. I'm not even sure how much longer the evaluation would have taken. Talking about compression... @Evan A non-compressed binary representation will also deliver a significant size reduction, given that only ~3.32 bits are required to store each digit. How about 3798102 bytes instead of 9 MB? Anyway, you all fortunately realized that I was kidding. I was just mocking myself publicly because I had been careless to start downloading the file before even thinking how big it would be, and I had no need for the data itself. Posted by: jkohen at January 23, 2006 10:39 PM Yes, its application is mainly pure number theory. One might consider that to be climbing a mountain because it is there, personally I find that far more beautiful, more fundamental, deeper, more lasting than such ephemerata as mountains. But for those whose feet are firmly mired in the clay, there are some (admittedly slight) practical applications. Advancements in techniques for convolution, developed for GIMPS, have improved FFT algorithms, which are of tremendous practical application. Another interesting benefit of GIMPS is that after a result is found through massive computation, its correctness can be definitely established with much smaller effort. This makes GIMPS a useful way to test distributed computation systems (and the hardware on which they run). In comparison, testing the validity of results in, say, protein folding, can require a complete research project in its own right. Comparing GIMPS to Folding@home; well, for one thing, GIMPS is consuming far less computrons than the protein folding project. GIMPS does about 18 TFLOPS, while Folding@home does about 190. And Folding@home is now only one of dozens of medically related distributed computing projects, and then there are others like SETI@home (100 TFLOPS). See, for example: All of these efforts involve donated computer time, so if someone chooses to support GIMPS rather than Folding@home, that's his business. And of course, the vast majority of computer owners are not supporting Folding@home or GIMPS or anything else, their PCs are either using their idle cycles to do nothing but generate carbon dioxide, or else are in a botnet distributing spam. Posted by: Roger at January 23, 2006 11:19 PM "...what's the point..." Heard about "basic research", guys? History indicates that using a certain percentage of funding for advancing knowledge which is not deemed immediately useful produces, in the average, useful knowledge which would probably be difficult to otherwise obtain. E.g., much of elliptic curve theory wasn't developed for cryptography... Posted by: RonK at January 23, 2006 11:26 PM Funny thing. Right before I came here, I needed a "burn" test program to test a machine, and downloaded prime95 to do it with. As far as "needing" to crunch big numbers, some of it is bragging rights, some of it is to test a system (burn test), some of it is for a real purpose. Posted by: jammit at January 23, 2006 11:42 PM I wonder if I can get a DIN-A0 print of the number in Verdana 6pt. Posted by: Primepimp at January 24, 2006 12:26 AM GIMPS looks like it is solving the same kind of problem as BOINC, though set up to be prepared for issuing a prize. So far, I've yet to see these networks used for anything truly practical (many biochemists will tell you that computational protein folding is pretty much a waste of time). But there's no denying that they could be used for lots of practical things, like cracking RSA keys. I wonder how long it will take, and wonder if they'll figure out a way to pay people for their CPU time. In the mean time, I think I'll go back to searching for space/time ship plans in those 30 million bits of prime. Oh, and wouldn't 43.txt have been more efficiently distributed as pure binary plus a simple program to render it as decimal digits? Posted by: Andy at January 24, 2006 6:15 AM ... I stand corrected. The wikipedia page lists some projects that actually *do* look practical. Hmmm... which one isn't gonna overheat my AMD processor... ? Posted by: Andy at January 24, 2006 6:22 AM This is the sign that the beast is coming. Posted by: be-afraid at January 24, 2006 6:26 AM "I find that far more beautiful, more fundamental, deeper, more lasting than such ephemerata as mountains" Wow. I find it quite exhilirating, and a touch scary, when I am stuck in the middle of a huge Mountain range. How sure are you that the "large" prime numbers (it is all relative) will always be important? If resolving prime factors becomes easy, will you like mountains again? Posted by: Chris at January 24, 2006 8:25 AM Possibly the number itself may not be that useful in everyday life or even in cryptography for a while. But may be the techniques and ideas that were developed to achieve this will be of use in other ways very soon. Blue sky research can have benefits that come not from the end result but from the efforts made to get that end result. Posted by: DogKebab at January 24, 2006 8:26 AM this is old news to fans of mersenne.org, which i mentioned in a comment to bruce schneier's rogue botnet article couple of months ago. Posted by: another_bruce at January 24, 2006 9:25 AM Um, this is not just an "intellectual mountain climbing event". Okay, so it took 7000 computers 10 months. How many computers does Google own? How about the NSA? We suspect the NSA is ahead of the rest of the world in, among other things, prime factoring. Estimating the resources available to the NSA and evaluating how long it takes for the NSA to factor primes is an important activity. Remember, the knowledge and resource the NSA has eventually become become readily available, given time. When script kiddies with 7000 node botnets start being able to factor financial institution keys, that's a huge problem. Posted by: jmr at January 24, 2006 9:56 AM "evaluate (2**30,402,457)-1" jkohen, "I just cancelled the evaluation of that expression after 150 minutes." What did you do to evaluate it? 2**x = 1<<x, where << is the shift left operation. Thus you need only 1 bigint shift left and one bigint subtraction to get the binary representation of the number. Of course, the binary representation is a bit, well, boring... The conversion to decimal ascii could take a while, depending on the algorithm. ;) Posted by: Secure at January 24, 2006 12:27 PM @ Secure > Of course, the binary representation is a bit, well, boring... Decimalist! Anti-binaryte! /noise Posted by: Pat Cahalan at January 24, 2006 1:04 PM Some of you get it. Others need to read _The_Man_Who_Loved_Only_Numbers_
Posted by: David at January 24, 2006 2:38 PM Hello, Posted by: T.Rex at February 2, 2006 2:39 PM you don't need to open the file. Just right click on the file and hit save target as. It will just take 10 mins. or so. Posted by: vikas at February 10, 2006 1:23 PM Wow,the size of the numbers & tasks is so daunting and nobody mentioned the roots to Mersenne primes and cyphers. In the apps I know the bigger the better and more rootable hence applicable to comms eg. CDMA,Blue-tooth etc & 802.11. Posted by: 1/2" at April 24, 2006 1:00 AM Wow,the size of the numbers & tasks is so daunting and nobody mentioned the roots to Mersenne primes and cyphers. In the apps I know the bigger the better and more rootable hence applicable to comms eg. CDMA,Blue-tooth etc & 802.11. Posted by: 1/2" at April 24, 2006 1:09 AM Is there a theorem for the representation of any prime number? Posted by: balo at August 21, 2007 4:12 PM Post a comment
Powered by Movable Type. Photo at top by Steve Woit.
Schneier.com is a personal website. Opinions expressed are not necessarily those of BT. |
|
Comments