ECC2K-130 on NVIDIA GPUs

  • Daniel J. Bernstein
  • Hsieh-Chung Chen
  • Chen-Mou Cheng
  • Tanja Lange
  • Ruben Niederhagen
  • Peter Schwabe
  • Bo-Yin Yang
Conference paper

DOI: 10.1007/978-3-642-17401-8_23

Part of the Lecture Notes in Computer Science book series (LNCS, volume 6498)
Cite this paper as:
Bernstein D.J. et al. (2010) ECC2K-130 on NVIDIA GPUs. In: Gong G., Gupta K.C. (eds) Progress in Cryptology - INDOCRYPT 2010. INDOCRYPT 2010. Lecture Notes in Computer Science, vol 6498. Springer, Berlin, Heidelberg

Abstract

A major cryptanalytic computation is currently underway on multiple platforms, including standard CPUs, FPGAs, PlayStations and Graphics Processing Units (GPUs), to break the Certicom ECC2K-130 challenge. This challenge is to compute an elliptic-curve discrete logarithm on a Koblitz curve over \(\mathbb{F}_{2^{131}}\). Optimizations have reduced the cost of the computation to approximately 277 bit operations in 261 iterations.

GPUs are not designed for fast binary-field arithmetic; they are designed for highly vectorizable floating-point computations that fit into very small amounts of static RAM. This paper explains how to optimize the ECC2K-130 computation for this unusual platform. The resulting GPU software performs more than 63 million iterations per second, including 320 million \(\mathbb{F}_{2^{131}}\) multiplications per second, on a $500 NVIDIA GTX 295 graphics card. The same techniques for finite-field arithmetic and elliptic-curve arithmetic can be reused in implementations of larger systems that are secure against similar attacks, making GPUs an interesting option as coprocessors when a busy Internet server has many elliptic-curve operations to perform in parallel.

Keywords

Graphics Processing Unit (GPU) Elliptic Curve Cryptography Pollard rho qhasm 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2010

Authors and Affiliations

  • Daniel J. Bernstein
    • 1
  • Hsieh-Chung Chen
    • 2
  • Chen-Mou Cheng
    • 3
  • Tanja Lange
    • 4
  • Ruben Niederhagen
    • 3
    • 4
  • Peter Schwabe
    • 4
  • Bo-Yin Yang
    • 2
  1. 1.Department of Computer ScienceUniversity of Illinois at ChicagoChicagoUSA
  2. 2.Institute of Information ScienceAcademia SinicaTaipeiTaiwan
  3. 3.Department of Electrical EngineeringNational Taiwan UniversityTaipeiTaiwan
  4. 4.Department of Mathematics and Computer ScienceEindhoven University of TechnologyEindhovenNetherlands

Personalised recommendations