XboxHacker BBS
 
*
Welcome, Guest. Please login or register.
Did you miss your activation email?
May 23, 2013, 10:34:30 PM


Login with username, password and session length


Pages: 1
  Print  
Author Topic: About broke xbox rsa key, anyone read this from S_L__S  (Read 1754 times)
mangueboy
Newbie
*
Posts: 4


View Profile
« on: January 12, 2010, 07:13:31 PM »

This is post of S_L__S from xbox Scene. What you think. Is this viable?

Neo project is dead... it's sad :-(
But the biggest problem is that the MS key is a 2048bits key, and the time to crack it is ... enormous !

With a crypto professor I've discussed about RSA and after weeks we had an idea to break RSA.
We think that there can be a security hole in RSA if the numbers P and Q are closer, and N can be considerate as a square. It reduce the search for cracking.

Let me give you a simple example :

RSA is done by choosing 2 primes numbers P and Q (very close this time)
> P = 61
> Q = 53

We need the number N known as : N = P x Q
> N = 61 x 53 = 3233

To obtain E, the public exponent we have to find a number
that don't have common factor with (P-1)(Q-1)
> (P-1)(Q-1) = (61-1)(53-1) = 60x52 = 3120
> 3120 = 2 x 2 x 2 x 2 x 3 x 5 x 13
> 3120 = 2^4 x 3^1 x 5^1 x 13^1
So I choose :
> E = 11 x 17 = 187

Now I need D, the private exponent where
( E x D ) mod ( ( P - 1 ) x ( Q - 1) ) = 1
> ( 187 x D ) mod ( 3120 ) = 1
And we find
> D = 2803
> 187 x 2803 = 524161
> 3120 x 168 + 1 = 524161

The Public key is : 187|3233
The Private key is : 2803|3233

Encryption of the number [69] :
69^2803 mod ( 3233 ) = 2586
Decryption of 2586 :
2586^187 mod ( 3233 ) = 69, yeah it works :-)


Now, if i'm a cracker i've only :
N = 3233
E = 187
P is prime
Q is prime
and i now that 69 -> 2568

I can supose that N is a square so P = Q
In that way to find P and Q i use step by step calculs
Sqrt( N ) = Sqrt( 3233 ) = 56.859
So I try to find the primes numbers neer 56,859
but I'm sure that one is > 56.8 (let's say P2)
and the other is < 56.8 (it's Q2)

So i have my list of prime numbers :
1, 2, ..., 37, 41, 43, 47, 53, 59, 61, 67, 71

So i try :
P2 < 56.8 => P2 = 53
Q2 > 56.8 => Q2 = 59
53 x 59 = 3127 < N so i have to increase P2 or Q2
I can't increse P2 (<56.Cool so I increase Q2
P2 < 56.8 => P2 = 53
Q2 > 56.8 => Q2 = 61
53 x 61 = 3233, FOUND !

I know that this example is very VERY very VERY very simple but it shows another way to crack RSA and a faster way to do it than brute forcing :-)

Unfortunatly I'm too busy to program a client as NEO PROJECT and to program a crack that follow my may, but if anybody has time too it would be great :-)

[ ADD 08 January 2002 ]
Please correct me if i'm wrong.

the Xbox RSA Private key is 2048bits len.
The Key is composed by 2 numbers : D and N, 1024bits len each.
N is a 1024bits number => 2^1024.
With the square method, we can 'only' test every P by a division : N/P is integer ? (a division is a succession of substractions)
And we can decide to compute with P < Sqrt(N) (so Q > Sqrt(N) )
So P is (2^1024)^(1/2) => 2^512.
There are a lot of chance that P may be a big number, maybe > 2^256
So the chalenge may be more... reasonable ;-) , no ?

"
My words

I think we can do a Central Bot site that delivery several small works for thousand of an assigned member with a login and password. I saw this before for others purpose, but i don't remenber how much bit the RSA was.

« Last Edit: January 12, 2010, 07:25:07 PM by mangueboy » Logged
ReverseAffect
Xbox Hacker
*****
Posts: 1345

360Reball


View Profile WWW
« Reply #1 on: January 12, 2010, 07:44:03 PM »

Good luck......lol
Logged

sick like a mofo..not reballing for a while...
B1N4RY
Xbox Hacker
*****
Posts: 790


View Profile
« Reply #2 on: January 12, 2010, 08:25:01 PM »

I'll hand out $100 to every member on this forum that have fully comprehended this entire post and know what's going on.

Anyways, 2048 bit is simply too long. No matter how many nodes you have linked in your legal botnet and which calculation/guess method you uses, it will still take matters of decades to find the correct key.
« Last Edit: January 12, 2010, 08:27:19 PM by B1N4RY » Logged
tex1ntux
Hacker
***
Posts: 50


View Profile
« Reply #3 on: January 12, 2010, 09:34:59 PM »

I'll hand out $100 to every member on this forum that have fully comprehended this entire post and know what's going on.
Should I PM you my paypal info?  Tongue

RSA 2048 will be safe for a while.  768 was cracked last week, and 1024 is expected to remain safe for 3-5 years.
Logged
ddxcb
Xbox Hacker
*****
Posts: 614


meh, who buys or own ""JTAGS""


View Profile
« Reply #4 on: January 12, 2010, 10:29:50 PM »

You better have a chance, kicking down NSA doors, and crack it your self Tongue
Logged

I'm a ADD modder, got to mod or be bored xD
ReverseAffect
Xbox Hacker
*****
Posts: 1345

360Reball


View Profile WWW
« Reply #5 on: January 12, 2010, 10:40:58 PM »

well all being based on this.....which if that was the case it be Cracked from 2005....

We think that there can be a security hole in RSA if the numbers P and Q are closer, and N can be considerate as a square. It reduce the search for cracking


if this was the case we'd all be happier ,but it is nowhere near this you can judge P & Q being close numbers ...it a random shot
P or Q how the hell can you pick something close..it don't even apply to the table

not to mention N can be considerate as a square. of what? P & Q and there not known and guessed so N=false....
I mean it's great that now you can guess close prime numbers but for 2048 it ain't going to happen in anyone's lifetime here.
« Last Edit: January 12, 2010, 10:44:53 PM by ReverseAffect » Logged

sick like a mofo..not reballing for a while...
B1N4RY
Xbox Hacker
*****
Posts: 790


View Profile
« Reply #6 on: January 12, 2010, 11:03:00 PM »

If anyone is interested, take a look at this article on how 768 bit RSA was recently cracked

Logged
tex1ntux
Hacker
***
Posts: 50


View Profile
« Reply #7 on: January 13, 2010, 02:37:40 AM »

If anyone is interested, take a look at this article on how 768 bit RSA was recently cracked
I read through it the other night with a cup of coffee and a notepad.  Fun stuff. Smiley
Logged
ReverseAffect
Xbox Hacker
*****
Posts: 1345

360Reball


View Profile WWW
« Reply #8 on: January 13, 2010, 02:51:25 AM »

ya and the cool part is we will not be around for 2048...lol(maybe).

RSA-768
Status: Factored
Decimal Digits: 232

12301866845301177551304949583849627207728535695953
34792197322452151726400507263657518745202199786469
38995647494277406384592519255732630345373154826850
79170261221429134616704292143116022212404792747377
94080665351419597459856902143413

Decimal Digit Sum: 1018


RSA-2048
Status: Not Factored (it's going to take till almost 2020 to reach 1024)
Decimal Digits: 617

25195908475657893494027183240048398571429282126204
03202777713783604366202070759555626401852588078440
69182906412495150821892985591491761845028084891200
72844992687392807287776735971418347270261896375014
97182469116507761337985909570009733045974880842840
17974291006424586918171951187461215151726546322822
16869987549182422433637259085141865462043576798423
38718477444792073993423658482382428119816381501067
48104516603773060562016196762561338441436038339044
14952634432190114657544454178424020924616515723350
77870774981712577246796292638635637328991215483143
81678998850404453640235273819513786365643912120103
97122822120720357

Decimal Digit Sum: 2738


now how the hell you write something to factor primes into like in the first post.....bla....till the future....
Logged

sick like a mofo..not reballing for a while...
Kosmokrator
Newbie
*
Posts: 1


View Profile
« Reply #9 on: January 22, 2010, 03:31:11 AM »

Good idea but it's an attack that would only work for smaller keys, I'd suspect the complexity of something like this would increase exponentially and I shudder at the thought of trying to crack a key that large.
Logged
Pages: 1
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC

Valid XHTML 1.0! Valid CSS! Dilber MC Theme by HarzeM