Fast exhaustive search for polynomial systems in F2
Journal
Lecture Notes in Computer Science
Journal Volume
6225
Pages
203-218
Date Issued
2010
Author(s)
Abstract
We analyze how fast we can solve general systems of multivariate equations of various low degrees over ; this is a well known hard problem which is important both in itself and as part of many types of algebraic cryptanalysis. Compared to the standard exhaustive search technique, our improved approach is more efficient both asymptotically and practically. We implemented several optimized versions of our techniques on CPUs and GPUs. Our technique runs more than 10 times faster on modern graphic cards than on the most powerful CPU available. Today, we can solve 48+ quadratic equations in 48 binary variables on a 500-dollar NVIDIA GTX 295 graphics card in 21 minutes. With this level of performance, solving systems of equations supposed to ensure a security level of 64 bits turns out to be feasible in practice with a modest budget. This is a clear demonstration of the computational power of GPUs in solving many types of combinatorial and cryptanalytic problems. © 2010 Springer-Verlag Berlin Heidelberg.
Type
journal article