Source code for our paper "Solving Discrete Logarithms in Smooth-Order Groups with CUDA" from SHARCS 2012. The cuda-11.5 branch will compile on CUDA 11.5 and now runs with two A100 GPUs, though is perhaps not tuned optimally.

Steven Engler 0ec3f2b5b8 Improved support for local Makefiles. vor 8 Jahren
.gitignore 3a50b8f3a9 Added a '.gitignore' file. vor 8 Jahren
COPYING e2973619c9 Commit cudadl-0.8 to git vor 14 Jahren
Makefile 0ec3f2b5b8 Improved support for local Makefiles. vor 8 Jahren
README 9fca8d29fd cudadl-0.9 vor 14 Jahren
atomic_iostream.h 3a802c8e75 Improved the logging for dlrho. vor 8 Jahren
controller.cc ecd76f9dec Improved scheduling. vor 8 Jahren
controller.h ecd76f9dec Improved scheduling. vor 8 Jahren
controller_main.cc ecd76f9dec Improved scheduling. vor 8 Jahren
cudadl.h 1da839f0d8 Can save distinguished points to files. vor 8 Jahren
desired_resources.cc ecd76f9dec Improved scheduling. vor 8 Jahren
desired_resources.h ecd76f9dec Improved scheduling. vor 8 Jahren
dlrho.cc ecd76f9dec Improved scheduling. vor 8 Jahren
dpnode.cc 411725a245 Added warning when dpnode buffers don't empty. vor 8 Jahren
dpnode.h 5b62cbb2c4 Split off the three main()s in preparation for MPI wrapper vor 14 Jahren
dpnode_main.cc 5b62cbb2c4 Split off the three main()s in preparation for MPI wrapper vor 14 Jahren
dpstream.cu 1da839f0d8 Can save distinguished points to files. vor 8 Jahren
evutils.cc d8d46482b9 Hardcoded rules for hostname modifications. vor 8 Jahren
evutils.h 411725a245 Added warning when dpnode buffers don't empty. vor 8 Jahren
gen_N.cc 9fca8d29fd cudadl-0.9 vor 14 Jahren
gen_all_N.sh 47faf09287 Improved the timing experiment script. vor 8 Jahren
gencios_reg_20 771b13c42c Use macros to include the inline assembly instead of inline functions vor 14 Jahren
logparse.pl 9fa203afbe Add a program to parse the logfile for some interesting statistics vor 14 Jahren
mpi.cc 904cf8667e MPI version redirects some output to files. vor 8 Jahren
parrhoasm.cu 1da839f0d8 Can save distinguished points to files. vor 8 Jahren
run_timing_experiment.sh 47faf09287 Improved the timing experiment script. vor 8 Jahren
subproblem.h e5decaf5df Communicate the dpfreq to the workers correctly vor 14 Jahren
summarize_data_multiprocess.py ce3141f7e1 Added scripts for collecting timing data. vor 8 Jahren
worker.cc ad3cdae4ba Give the worker threads a name. vor 8 Jahren
worker.h 0e11651c7d The worker's 'cuda_dev_id' argument selects a GPU. vor 8 Jahren
worker_main.cc 0e11651c7d The worker's 'cuda_dev_id' argument selects a GPU. vor 8 Jahren

README

cudadl-0.9
21 Mar 2012
Ryan Henry and Ian Goldberg
{rhenry,iang}@cs.uwaterloo.ca
http://crysp.uwaterloo.ca/software/

This package contains the source code to our CUDA implementation of
van Oorschot and Wiener's parallel version of the Pollard rho discrete
log algorithm. It is intended for use on 1536-bit moduli that are
RSA numbers with smooth totient; that is, the modulus N=pq, where p and q
are 768-bit primes, and the prime factors of p-1 and q-1 are all
distinct and less then B, for a parameter B. [The value 1536 is
hardcoded as "WORDS = 24" (24*32*2 = 1536) in the Makefile; it is easy
to change this value and recompile if desired.] Note that this means
the totient of N = \phi(N) = (p-1)(q-1) has all prime factors less than
B; that is, \phi(n) is "B-smooth".

Usage:

1. Build the software. You'll need:

NTL
GMP
NVIDIA CUDA Toolkit 3.1
2 M2050 (or other compute capability level 2.0) CUDA cards
[If you have more or just 1, you'll need to modify dlrho.cc,
unfortunately.]

Hopefully just typing "make" should work. It will build gen_N and
dlrho.

2. Create the modulus N as, for example, a 1536-bit RSA number whose
totient is 2^50-smooth:

./gen_N 1536 50 > N

3. Generate a DL problem mod N and solve it:

./dlrho < N

This software is described in "Solving Discrete Logarithms in
Smooth-Order Groups with CUDA", CACR technical report 2012-02,
http://www.cacr.math.uwaterloo.ca/techreports/2012/cacr2012-02.pdf

This program is covered under version 3 of the GNU General Public
Licence; see the file COPYING for more information.

Changelog:

0.9 (21 Mar 2012)
Extend the code to handle smoothness levels (B) larger than 2^60. Now
we can handle up to 2^92. We have successfully run a test with
B = 2^80.

0.8 (23 Jan 2012)
Initial public release