yashsingh1/xdaforums huggingface dataset:
[XPERIA X10 Android Development] MAGPC:
I think using the GPU power will add much power to the process, and substantially decrease the time required to unlock the key.

I used to do some 3D rendering, I tried some CPU, CPU+GPU renderers and they do make a difference. Also there was a new renderer to come that would use CPU+GPU in a distributed manner in a network, meaning that it will use the CPU and GPU of each computer in the network, if that is implemented it will make a huge difference.

Also, if you went through the CUDA way, just don't forget ATI stream,

OpenCL would be great as it is adopted by both ATI and Nvidia.

P.S.: I am not a developer, I am just an enthusiast who care about this.
[XPERIA X10 Android Development] OmegaRED^:
OpenCL will also work.

I'm pretty sure the the code is in HEX..
[XPERIA X10 Android Development] DooMLoRD:
OpenCL is in infancy... CUDA is much more developed and highly optimized for nVidia hardware...

i have a few GTX480s & GTX280s so i can help out if i get those codes (optimized)...

@all

may be we can start a project at BOINC
[XPERIA X10 Android Development] mayank.1love:
BOINC seems totally possible but I think that may need a server to deploy its code.

http://boinc.berkeley.edu/trac/wiki/SoftwareDevelopment

I think the Androinc project for breaking motorola rsa key was stopped due to main server overload. We must have a good dedicated server for BOINC project.

We just need some good coders here to develop the BOINC code and we're good to go.

Any programmers wanna help please reply here.
[XPERIA X10 Android Development] DaveShaw:
Read back through the thread, you'll see this discussion has been had before and nothing came of it. The main reason is, the developers who know how to write an algorithm to check Private Keys know it will never be broken. Also there is the problem of distributing the brute force load. With projects like SETI there is data to share, with this, we have to know the numbers to distribute, but we can't do that without knows the prime numbers in the first place. If we knew the prime numbers then we wouldn't need BOINC. I'm sure there are ways to distribute the work, I'm just saying it's not as simple as it seems.

I will still probably be more feasable to try and reverse engineer the bootloader, like what was done with the HTC ones back in the day.
[XPERIA X10 Android Development] clixt:
Just a thought.. Maybe we could do it like a Fold@Home kind of a thing.

A thousand computer is better than one 6 core computer. ;)

http://folding.stanford.edu/
[XPERIA X10 Android Development] consolation:
Genius, you will reduce the time from a billion years to one million. Hey, let's get a million computers together so it can be broken in a thousand years. Any solution needs to be solvable within a year or so...
[XPERIA X10 Android Development] Chillaxed:
Guys I'm pretty sure they cracked the bootloader already. The thread is called interesting news
[XPERIA X10 Android Development] Frosty666:
Nah, there was a war between 2 devs both claiming that they had unlocked it, and one claiming the other dev had stolen it off him. It was all a big mess and the thread got deleted and the 2 devs got banned.

Sad really. I thought we were on to something.
[XPERIA X10 Android Development] kaisan1:
Just a small question.. sorry if its a stupid one.. but if at all we find the key by this method then would that be a universal bootloader unlocker key? I mean will it work on every x10?
[XPERIA X10 Android Development] saltorio:
Something to keep in mind with any brute force attempt: if it's more than likely that the process will take more than a 12 to 18 months, it's not worth it. The X10 came out in late March 2010. Most people replace their phones every 3 years - if not sooner - especially with the rate in which things are progressing (quad-cores anyone?).
[XPERIA X10 Android Development] shahkam:
This doesnt mean people gonna put their x10 in the garbage having a extra phone to play whit is always fun ! ;)

Sent From My X10!
[XPERIA X10 Android Development] saltorio:
Oh, no doubt. There will still be people who will want to crack it just for the sake of being able to do or to play. But the general drive for a bootloader bypass will diminish and with it so may a noticeable portion of the participation in the effort (slowing things down further).
[XPERIA X10 Android Development] clixt:
Ahahaa lol.

So it still won't cut it..
[XPERIA X10 Android Development] Phantasm4489:
well thats all completely wrong for starters. The key is 1024 bits in size that means there are 2^1024 possible keys. Thats 1.79 x 10^308 (thats 1 and 308 0's). So even if you get a million people doing it thats 1.79 x 10^302 variations for each machine to test. If you assume a machine could test a trillion keys a second then it would still take 5.7 *10^285 years to test them all. Even if you found the key in the first 1% of all keys tested that is still 5.7 *10^283 years!
[XPERIA X10 Android Development] THE STIG 69:
I have just had a quick look at brute force 1024 bit RSA key on Google, and by the looks of things if someone is crazy enough to do it, it can be done quite quickly (someone is on about freezing the memory with L2N in the comments in the link below).

Or am I just missing the point compleatly?

http : // techie-buzz.com / tech-news / 1024-bit-rsa-cracked . html

(Remove the spaces in the address above)
[XPERIA X10 Android Development] gulpreet:
Well it doesn't seem like we're having a break through with the bootloader at the moment. So if we can make a program that can do all this, I don't see any harm in it running on my computer. And who know's we might even get lucky.

@Chillaxed I read up what you meant by distributed computing, it's worth a shot.
[XPERIA X10 Android Development] THE STIG 69:
It might be worth someone making a program to use the GPU instead of the CPU, cause in the Milestone thread (http : // forum.xda-developers . com / showthread . php?t=883376 page 25 I think) someone said that 10hours of CPU work = 3min of GPU work, so I think that would be the better option.

(Remove the spaces on the web address)
[XPERIA X10 Android Development] totalundone:
So if someone can find a way to verify the status of the RSA key...

In regards to brute-forcing

If someone wrote a program to use a GPU, this could be sped up considerably than using the CPU alone.

Another option would be to use Amazon's EC2 service. It would still take a long time but their rates seem good and could considerably speed up any bruteforcing attempt.

In regards starving the cpu of electricity

This is probably the best option. Here's a link to the story of the university that did it.

Basically with 81 P4 chips and 104 hours, they cracked the 1024-bit RSA encryption code without any damage to the cpu or any components. I wish I knew more of this kind of science.

If this was used with Amazon's EC2 it looks like it could be done in a few hours at $2.16 per hour (on GPU and not general CPU), lol. I would pony up the 3$ in processing power it would take ;)

edit: here's a link to their journal article
[XPERIA X10 Android Development] Chillaxed:
Ok. Now we need some programmers.

And we don't need to just guess random numbers, there's a formula for generating RSA keys.
[XPERIA X10 Android Development] sephirothusi:
Whitepaper on 768-bit RSA cracking, may be useful:

http://eprint.iacr.org/2010/006.pdf
[XPERIA X10 Android Development] gulpreet:
We should have a couple coders here on the forum. And we can also talk to the guy that made the milestone one if we need additional help. So who's up to start some coding?
[XPERIA X10 Android Development] mr_at_sgs:
Is the Milestone Boinc Project finished sucessfully?
[XPERIA X10 Android Development] Lord Takyon:
I can't code, but I'll gladly donate much cpu time. I have several quad and 3 dual core machines I can utilise. Several uni core machines around too.

We need people with usable gpus too.
[XPERIA X10 Android Development] NeoInc:
I have only Ati 5870 not sure if that can help
[XPERIA X10 Android Development] cesko69:
I would GPU/CPU Time if needed and possible

Proudly sent from my French Minitel
[XPERIA X10 Android Development] 11235:
on a kinda related idea (i know nothing about RSA keys) could we either just listen/watch/supervise/record the key from when we install an update?

kinda like watching a wifi's traffic to hack the key?

or is there a way which we could force the phone/update to cough up the key with a fake update (add a couple lines in the code to replace a keyboard package or something from an old up date?) or a fake phone (emulated on pc)?

if that is just crazy talk then i got a good pc with a good gpu/cpu to add to the muscle :cool:

*edit: can't we get some program to record all the usb traffic when you up date? or does it update by copying on to the phone first the updating?
[XPERIA X10 Android Development] chaostimmy:
CPU power isn't what we need! GPU we need!
[XPERIA X10 Android Development] ribben:
Guys please everybody please it's not the time to choose between cpu or gpu it's the time to find some programmers so everybody should be looking for that not telling which is best cpu or gpu!!!
[XPERIA X10 Android Development] aLPaSLaN07:
Combinations should be equally divided into pieces. For instence 1h of workload for an avarage GPU. Then this distributed system will give every GPU a piece to test. If a piece is given , that will not be given to anyone else. Once a piece is tested , another piece will be given. This will go on spreading to GPU's like this. But the real problem here is to "test". There should be a X10 simulator embedded in the program.. Otherwise , the idea of testing each combination on our phones fails even before starting it.
[XPERIA X10 Android Development] kr3w1337:
Why not talk about all this logistics work whether to use what chip later. The main problem is how to check whether the key you have is valid or not in a really efficient way.
[XPERIA X10 Android Development] aosi:
Well thats gonna take a life to be found, but a read it can be done by using GPU too and its faster, but i dont know a tool that use ouir gpu and cpu to do that so lets hope a good night maybe that key can be found
[XPERIA X10 Android Development] mr_at_sgs:
Only?

In most Boinc projects ATI is very fast, faster than pricely compareable Nvidias. I have to spend two G92 for a 24/7 duty.
[XPERIA X10 Android Development] RaDi:
ok i don`t undrstand any thing of this really ! , but i can bring some programer to this topic if u need !

and why we don`t ask the team who hack PS3 , i think thy can help !
[XPERIA X10 Android Development] OmegaRED^:
Radeon most 5xxx cards have open CL.. very good for on VPU math

and Geforce has CUDA cores.. could be used for the same thing.

And anyone with a 6 core AMD & i7 should be able to help supply power.

Now we need someone to write something that can do the job...

Gotta love the 21st century.
[XPERIA X10 Android Development] Phantasm4489:
has anyone actually ever heard of a project that successfully brute forced an rsa key? The whole point of public key cryptography is that you cant brute force it - and when you are talking about keys of this size it doesnt really matter how much cpu/gpu power you have. The numbers are just too big. If it was that simple to brute force people would be spending money doing this for commercial gain
[XPERIA X10 Android Development] pedrocel85:
Hey phantasm,

I Dunno if u are new to foruns, but here we use a lot search function and read the topics that you actualy wanna help.

RSA keys arent so big and have been broke sometimes.

This time i did the research s to ya, next time it could be diferent.

Enkoy and follow the rules in foruns.
[XPERIA X10 Android Development] Phantasm4489:
it was a rhetorical question really... I didnt ask whether RSA had ever been broken or not - I asked if it had ever been broken by brute forcing.

RSA keys dont get broken by pure bruteforcing alone I can assure you.

Implementations may be flawed but in that case they get broken by lots of reverse engineering or by hardware modifications - not by pure brute forcing.
[XPERIA X10 Android Development] Skamba:
This. I've already tried explaining it.

You will

NEVER

bruteforce a 1024-bit RSA key if it's properly implemented. With all the computation power in the world it would take trillions of years.
[XPERIA X10 Android Development] mr_at_sgs:
That's right. We have to find the weak point or a design flaw. Such asymmetric cryptography with 1024 key length sounds higher like it is. We must try to inject our plaintext and after signing we must analyse the crypts. We have to do this very very often, I am wrong?
[XPERIA X10 Android Development] MrHassell:
From the video on the random number Sony use the same in PSP as PS3.. the random is not at all random, it is in fact;

private int randomNumber{

return 4;

}

The number 4 is hardly random or hard to guess. Maybe the guys who broke the PS series should be brought into this?
[XPERIA X10 Android Development] Skamba:
Hi. You misunderstook the joke they made. It's actually a reference to XKCD.

Also, cracking the PS3/PSP has nothing to do with cracking the xperia, as they're made by entirely different divisions of Sony.
[XPERIA X10 Android Development] pcfanboy142:
Well, there goes that idea.
[XPERIA X10 Android Development] MrHassell:
psx-scene.com/forums/attachments/f6/23510d1294342780-psp-ps3-pkg-decrypter-extractor-v-1-0-0-0-mathieulh-psp_ps3_pkg_decrypter_extractor_v-1-0-0-0-rar

It's not a joke? Sony failed to generate a random K value for the eliptic curve encryption, not DSA not RSA and thanks to Fail0 they deduced the private key, note NOT by bruteforce as this thread states.

Mathieulh has created the windows app with sources provided and the above link will lead you in the right direction. There will be no bruteforce for a few hundred years, so guess that leaves this as an option. Pick up the pieces and follow the trail to the white rabbit.
[XPERIA X10 Android Development] rourouni815:
i have an i7 core and an 5870 ill be willing to help with this project
[XPERIA X10 Android Development] THE STIG 69:
I have a:

Q9650 OC to 3.8GHz (Restricted OC due to slow memory :()

and a

ATI 5850

I am willing to help too if we can get some

programers

to make a program for this kind of testing ''key's'' and so fourth :D
[XPERIA X10 Android Development] Chillaxed:
Yeah a raw bruteforce will take time, but RSA keys are generated through the algorithm I posted, we have to use that to basically calculate the key, not guess it. Among other things. We could get a distributed network of poke bruteforcing while other people try to crack it other ways. Why not do every possible method
[XPERIA X10 Android Development] Chillaxed:
Found this, RSA keys are the result of multiplying two prime numbers. This formula apparently tests 1,000,000 numbers every 134 seconds. And it has room to be optimized.

public IEnumerable <long> GetPrimes( int numbe{ List <long> primes = new List <long> { 1, 2, 3 }; long startTest = 3; while ( primes. Count() < numberPrimes){ startTest += 2; bool prime = true; for ( int pos = 2; pos < primes. Count() && prim{ if ( startTest % primes[ pos] == 0){ prime = false;}} if ( prime) primes. Add( startTest)} return
[XPERIA X10 Android Development] consolation:
Unless you have a quantum computer from the future, in the time it takes to brute force the key, the human race will cease to exist as biological entities and the X10 will be as relevant as good flint knapping techniques are nowadays.

If you can't find a flaw in the crypto implementation, don't waste your time.

Sent from my jungle drum using mammoth bones.
[XPERIA X10 Android Development] Chillaxed:
raw buteforce is impossible after some research. however, there will have to be multiple programs written for this task, once the first program is written and does it job, write a new program to reference the data that the old program gave you. (assuming everyone wants to try and get some devs in on it.)

1. a 1024 bit key if it is only numbers will be 309 characters long. i referenced this chart :http://en.wikipedia.org/wiki/Password_strength#Password_strength_depends_on_symbol_set_and_length

2. write a program that calculates every single prime number up to 999999.....etc up to 309 characters long, and only store those numbers somewhere.

3. use distributed computing to ONLY use those calculated prime numbers that were calculated to start multiplying prime numbers by eachother.

4. discard any numbers that add up to a number that is less or more than 309 characters long. this eliminates the program asking if a password that isn't even the right length if it is right or not.

5. only test those 309 digit keys that were calculated from the data given from the last two steps on the bootloader. this eliminates every possibility of a truly random number that is that length.

the "309" changes if it's not just numbers, if it is alphanumeric its 199 digits, if it is all letters its 218 digits (just look at the chart)

does this seem viable? it definitely would speed things up exponentially.
[XPERIA X10 Android Development] arrantay:
anyone tried reading the white paper on the guys at Michigan Uni that worked out how to creat faults on RSA Keys

http://www.eecs.umich.edu/~valeria/research/publications/DATE10RSA.pdf

Might offer some insight into the matter

:)
[XPERIA X10 Android Development] Adolf1994:
Yesterday I saw the film Cargo (2009), where they raw bruteforced an RSA under ~2 hours :o

Btw, I think there are another way to bruteforce the key. I have a P4@3GHz and Nvidia 9400 GT, so this raw thing would be pretty hard.
[XPERIA X10 Android Development] malabarth:
My computer is yours!!! :p
[XPERIA X10 Android Development] prewed:
The users of Motorola Milestone has already launched a similar project for bruteforcing RSA Keys

Xda Thread:

http://xdaforums.com/showthread.php?t=883376

The project site:

http://poseidon.shacknet.nu:8080/MilestoneRSA/

How to create a BOINC Project - Step By Step instructions

http://www.boinc-wiki.info/How_to_create_a_BOINC_Project_-_Step_By_Step_instructions

We need a similar, need a developer who will start and will support the project

P.S: And people Less words more Action ;), do not spam about what your current computer is. At this stage, it is useless.
[XPERIA X10 Android Development] Skamba:
I'm not trying to be offensive, but you clearly do not know what you're talking about. 1024 bit is a number - it's a binary number of 1024 characters long. And yes, a decimal number of 309 chars would roughly hold the same amount of numbers. It is not like a normal password that humans have to be able to memorize.

Also, finding long prime numbers is very difficult.

Your idea about discarding those that aren't 1024 bit long is also wrong. Say, for example that it would be 5 binary characters long: It could be 10000 - which is according to your assumptions correct. But it could also be 01000 - which is the same as 1000, which according to your assumptions is only 4 long.

Also, do you have any idea how long a number of 309 decimals is?

I repeat again, using every computer on earth it would take trillions of years to bruteforce a 1024 bit key.
[XPERIA X10 Android Development] consolation:
Sorry... Not even close. Not to mention that generating prime numbers is an art in and of itself, there are serious flaws in your understanding of crypto. Go to your uni library, pick up a good book on cryptography - start there. I'm not being flippant, but there's just no way to even begin to address the problems with your approach without a few chapters on algebra, differential equations etc.. Truly not being an asshole here, and I appreciate your enthusiasm and the fact that you put some thought into this, but there's just no way a considered response could be made in a space of a forum post.

Incidentally, there are a few very good crypto forums that have excellent tutorials and experienced helpful members, I'd start there. I'll leave that up to your google-foo.

Best of luck.
[XPERIA X10 Android Development] consolation:
Cool, if it's a multiple qubit system we're in business.
[XPERIA X10 Android Development] pedrocel85:
Hey guys, stop beein a jerk.

Dont post coments its impossible.

Post coments to help, or be silent.
[XPERIA X10 Android Development] tomest:
Are you work for SE ?
[XPERIA X10 Android Development] qwer23:
No, he's stating a fact, that's all. If we don't have something to begin with (a known vulnerability in decryption for example), there's no possibility to crack a 1024bit key. Guys that's a fact, and google will tell you pretty fast if you'd use it.
[XPERIA X10 Android Development] Phantasm4489:
We are only trying to help by explaining how impossible this task is.

That aside, basically before everyone starts getting excited by the prospect of spending trillions of years bruteforcing 1024 bit RSA keys, someone needs to reverse engineer the public key so that we can write the code that attempts to sign a known ciphertext with all possible private keys to see which one will produce something that works with the known public key. Until this is done we cant actually do anything.
[XPERIA X10 Android Development] Chillaxed:
Looks like we need a programmer who also fully understands the formula for RSA keys
[XPERIA X10 Android Development] Skamba:
I don't. I do, however, have a degree in computer science.
[XPERIA X10 Android Development] igorls1:
anyway to generate the systematic voltage faults on X10? so we can use the new method and crack the RSA faster... anyway I got QX9770@4.2Ghz, i7@3.2 and GPUs 6850, 5670 and 4850 here to help!
[XPERIA X10 Android Development] brat81:
I have a GTX280 and a E8400 @ 3.6ghz my pc is on 24/7 mostly downloading so not much in processor power is being used so count me in.

I also have a p3 900mhz and intel celeron 2.6ghz but yeah na not going to happen on this things.
[XPERIA X10 Android Development] adeyb:
Nothing is impossible... A 1024 bit RSA key has already been hacked. (I did google!)

But is it practical? Not what I read. Brute force isn't necessarily an option by all accounts. It needed a little electrical manipulation.

;)
[XPERIA X10 Android Development] Findee:
But why keep repeating it? You've already said it and quite obviously no one cares and they would like to give it another go anyway, so why are constantly berating them about how impossible it is? If no one cared the first ten times it's been said, I highly doubt anyone will suddenly start caring.
[XPERIA X10 Android Development] 28spawn:
http://code.google.com/p/milestone-rsa/

just an example

they did it with 81 p4 in 109hours, we can to it in same time or less with 4/8 cores and gpus

o/
[XPERIA X10 Android Development] xtrmshadow:
Got a Phenom II X4 955 BE OC'ed and 2x HD 5770 Crossfire for power,so got more than enough but umm...

I think this went a bit too far ...lol ...i mean by the time we get the bootloader cracked by bruteforcing the 1024bit key,we'd all have bought one or 2 other mobile phones...

I think thats a bit overdoing it but if ya need sum p0w€r, count me in , ill help.

Regards.
[XPERIA X10 Android Development] beanoguy:
Just curious, did you ever receive a reply?
[XPERIA X10 Android Development] Chillaxed:
You're right, I don't completely understand what its all about. But the method I stated can be modified to work. No matter what we don't even have to bother testing if a key works if the numbers its multiplying aren't prime numbers. This process of elimination is still better than if plain random numbers are generated. This way the program doesn't have to waste its time asking if the key is right if the number isn't even in the right format.
[XPERIA X10 Android Development] Vilam:
I remeber last year of a bruteforcing event on the nintendo ds scene. Many people were into it but I don't know how it finished.

Anyway. I can make a gui for a c++ or java program (as you want) and I can put in algorithm but I don't have enought skill to find a good algorithm to generate the 1024b keys.