Lol when I just need to run a tool once like I don't mind doing nasty things like getting each thread started and then letting them run independently until one finds the solution, writes it out to disk, flushes it, and crashes the whole process to notify the other threads :P
I'm gonna go ahead and call that really bad coding, but it's fast for me and the software lol
looks over to see quantum scaling faste... and it's gone.
jk, mainly just because I wrote a key generator that automatically derives the size of the group based on the GNFS heurestic complexity, and it kept putting out somewhat reasonable values even as I went past 256, and 320 only took about 30 minutes so I said screw it, lets see if 512 is possible lol
I should just do a test to see how long libgmp's miller-rabin takes on 100kbit numbers, so I can at least have a reasonable estimate of how long each step takes
but even that is still ignoring the subgroup
I was stupid enough to not only not include a "# attempts" counter... but no way to pause and resume either :/
You rock! I was gonna bang my head against it a little more later, I have a feeling it's a small thing like switching an argument somewhere or something
I have unit tests for your key exchange so I do know that works
if you initiated a key exchange with me by sending your public key and a token to me, "continue_exchange" is the part where I generate my own ephemeral key and token, and generate a secret before sending you my token
(I think)
I could have gotten the logic wrong/was thinking of reworking it
It's not authenticated if you trust the received public key, you have to already have it, or have a signature from an authority that confirms that it's their "real" pubkey
@EllaRose oh important result if you use my scheme, at the core it's the "static-static" DH secret driving the authentication, so if that's compromised then so is the authentication
lol well I meant that factoring systems just scare me because even though the chances are basically as good as you can hope for (basically arbitrarily strongly in your favor) it just makes RSA automatically scare me more than DH because it seems like even though it's leaking zero information, it's leaking that zero
and I could never trust my own crypto lmao
if someone else proved to me it worked, I would consider "trusting" it lol