AIM2_cryptanalysis/logs/n256_l9_L1_seed=0_onlyestimate.log at main · cryptolu/AIM2_cryptanalysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
[i] Seed: 0
[i] Secret key: GF256Element(cca5a5a19e4d6e3c1846d424c17c627923c6612f4826867323a7711a81332876)

Generating (iv, ct) pairs...


[i] AIM/attack parameters:
- n = 256 bits
- ell = 9 branches
- L = 1 IVs
- M = 230 squarings (1 ... 2^(M-1) 2^M)
- W = 2305 t-monomials
- Only estimate ? True

[I] Time complexity rough estimate = 2^262.11 field ops

Generating base equations... (using linearized polynomials)

[i] Initial equations: 10
[i] Squared equations: 2310
[i] W = t-monomials in equations: 2305

Arranging equations...

[i] Full equation matrix F: H=2310 x W=2305

Computing pivots (p=0)
[i] Rank = #pivots = 2305/2305   fingerprint 641bcc4520db1533
[I] Row-degree sum ξ: experimental = 2^233.91, estimated = 2^234.32
[I] Total nonzero coefficients 1066525 <= 2W^2 = 10626050 ? True
[I] Time complexity 2^262.08 field ops = 2^254.08 encs  (1/n convention)
[I] Memory complexity : 2^246.08 field elems = 2^251.08 bytes = 3555832504336293681719253717932524606861130784642563985954884812800.00 GB
[R1] n=256  ell= 9  L=  1  M=230  W=2305  ξ=2^233.91  Time=2^262.08 field ops  Mem=2^246.08 field elems
[R2] n=256  ell= 9  L=  1  M=230  W=2305  ξ=2^233.91  Time=2^254.08 enc  Mem=2^251.08 bytes

[W] not running full attack 3555832504336293681719253717932524606861130784642563985954884812800.0 GB needed, 26.1 GB available
[i] Real secret key for comparison: GF256Element(cca5a5a19e4d6e3c1846d424c17c627923c6612f4826867323a7711a81332876)
	Command being timed: "sage attack-aim2.py --no-progress-bars -n 256 -l 9 -L 1 --seed=0 --only-estimate"
	User time (seconds): 97.85
	System time (seconds): 0.73
	Percent of CPU this job got: 99%
	Elapsed (wall clock) time (h:mm:ss or m:ss): 1:38.75
	Average shared text size (kbytes): 0
	Average unshared data size (kbytes): 0
	Average stack size (kbytes): 0
	Average total size (kbytes): 0
	Maximum resident set size (kbytes): 1248456
	Average resident set size (kbytes): 0
	Major (requiring I/O) page faults: 0
	Minor (reclaiming a frame) page faults: 348586
	Voluntary context switches: 153
	Involuntary context switches: 3437
	Swaps: 0
	File system inputs: 0
	File system outputs: 16
	Socket messages sent: 0
	Socket messages received: 0
	Signals delivered: 0
	Page size (bytes): 4096
	Exit status: 0