asciilifeform: pgpdump -i foo.asc

asciilifeform: lel

asciilifeform: so this thing parallelizes 'embarrasingly'.

asciilifeform: note that this is an upper bound, it applies regardless of what kind of magic is used.

asciilifeform: is this obvious or do i need to draw picture.

asciilifeform: if we know B - k shared topmost bits, then the work required to break in comparison with work W, supposing we knew B bits, is at most W*(2^k).

asciilifeform: btw, here is a handy elementary proof of a certain thing,

asciilifeform: not necessarily top, or bottom of prime.

asciilifeform: sarkar et al promises (the recipe is quite gnarly) ANY substring

asciilifeform: the other thing,

asciilifeform: and all of p1,q1,p2,q2 share at least top 20 bit.

asciilifeform: ditto p2, q2.

asciilifeform: but chances are that p1 and q1 share top 32 bit

asciilifeform: eye

asciilifeform: nothing odd, of course, to the naked aye.

asciilifeform: p and q have already been multiplied.

asciilifeform: these are moduli

asciilifeform: nono

asciilifeform: ^ hopefully not surprising

asciilifeform: and here is mine, http://wotpaste.cascadianhacker.com/pastes/cebf02d3-4b28-4e34-a66b-aa3edb3bd6e1/?raw=true

asciilifeform: generated one after another while process ran.

asciilifeform: and n2, bf ce 64 f1 43 f2 ...

asciilifeform: got n1, b9 4e de 87 7a....

asciilifeform: http://wotpaste.cascadianhacker.com/pastes/f6355da8-4a82-40d2-a6a0-d1217232dbac/?raw=true << this, for instance, is mircea_popescu's pub.

asciilifeform: does mircea_popescu fully apprehend where this train is going ?

asciilifeform: this is promising to be a very awkward occasion.

asciilifeform: the diddled rng being the first.

asciilifeform: soooo the subkey idiocy is apparently the 2nd half of a bipartite poison.

asciilifeform: this is a headshot.

asciilifeform: (linked earlier)

asciilifeform: http://wotpaste.cascadianhacker.com/pastes/51515493-1d40-446b-99d0-932642d8b90d/?raw=true << for instance.

asciilifeform: my runs have upper 32 BYTES in common.

asciilifeform: btw mircea_popescu ....

asciilifeform: quite likely.

asciilifeform: just that when you dance off its edge, required horsepower grows exponentially

asciilifeform: and this is not a hard bound, either

asciilifeform: 27.

asciilifeform: that's ~26 bytes of a 1024-bit prime.

asciilifeform: hmm, 0.21 'in practice.'

asciilifeform: e.g. primkey and subkey.

asciilifeform: between two public mods.

asciilifeform: contiguity of ~shared string~

asciilifeform: this may be enough to blow away a good fraction of extant gpg pubkeys.

asciilifeform: (anywhere in the mod pair)

asciilifeform: sarkar and maitra give us a bang if we know 0.266N consecutive shared bits.

asciilifeform: soooooo literature survey is in

asciilifeform: boolcrap1: i promise, you'll like this one.

asciilifeform: boolcrap1: http://btcbase.org/log

asciilifeform: boolcrap1: consider reading the channel log

asciilifeform: $up boolcrap1

asciilifeform: (since rooted out)

asciilifeform: funnily enough, testing on a box that, long ago, used to have gpg2 working...

asciilifeform: which does ???.

asciilifeform: i built it, refuses to run without 'gpg-agent'

asciilifeform: this is, i warned, quite laborious.

asciilifeform: <asciilifeform> _gcry_log_printhex instead.

asciilifeform: mod6: see earlier in log

asciilifeform: ugh

asciilifeform: not, at least, without some strange heathen magic, which i apparently lack here.

asciilifeform: apparently.

asciilifeform: http://wotpaste.cascadianhacker.com/pastes/7a7a03b8-9417-4d8b-912e-4345dbfeb482/?raw=true << mega-l0l.

asciilifeform: gpg-2.0.22 and libgcrypt 1.5.1

asciilifeform: now for the magic moment.

asciilifeform: presently testing on a box that had the deps crapolade

asciilifeform: _gcry_log_printhex instead.

asciilifeform: there's no log_hexdump in libgcrypt.

asciilifeform: oh and on top of this,

asciilifeform: perhaps just sad.

asciilifeform: hey there was a reason i did not start with gpg2.

asciilifeform: lel.

asciilifeform: that's the prefix the gpg2 abortion wants.

asciilifeform: find it and run gpg-error-config --prefix.

asciilifeform: when you built gpg-error, it shat out a binary, gpg-error-config

asciilifeform: aha

asciilifeform: hmm

asciilifeform: post output of failed ./configure .

asciilifeform: lessee, it built ?

asciilifeform: well if you want to do this the gentoo way, actually gotta build libgpgerror

asciilifeform: which is why 'let heathen box pull the binary deps'

asciilifeform: .

asciilifeform: make

asciilifeform: ./configure

asciilifeform: build gcrypt normally other than the added hexdump line.

asciilifeform: "

asciilifeform: and it'll look like ./configure --with-libgpg-error-prefix="/home/mircea/libgcrypt-something

asciilifeform: you want this only when building gpg.

asciilifeform: nonononono

asciilifeform: it will pull the deps you didn't tell ./configure about from the various pestholes they normally end up in.

asciilifeform: then build the new gpg2 as described here.

asciilifeform: fastest way to get all the deps is to simply grab a sacrificial (e.g., 'african') box and let it install gpg2

asciilifeform: aha

asciilifeform: if no makefile, it didn't get ./configure'd.

asciilifeform: libgcrypt, i mean

asciilifeform: didja ./configure it ?

asciilifeform: (grep 'configure' for 'with-libgcrypt', see how many other crud libs it demands...)

asciilifeform: ./configure --with-libgcrypt-prefix /where/you/put/it

asciilifeform: you gotta build libgcrypt and then tell gpg's ./configure where to find it

asciilifeform: nope.

asciilifeform: approx.

asciilifeform: BingoBoingo: i'm not even bothering with that crapolade nao.