Skip to content

Instantly share code, notes, and snippets.

@sonickun

sonickun/solver.py

Last active November 20, 2016 13:22
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save sonickun/9d84403d0a8a4f9f0dd741cbd7d7b2b7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save sonickun/9d84403d0a8a4f9f0dd741cbd7d7b2b7 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. sonickun revised this gist Nov 20, 2016. 1 changed file with 34 additions and 0 deletions.
    34 changes: 34 additions & 0 deletions solver.sage.py
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,34 @@
    # filename: solver.sage

    a = 1234577
    b = 3213242
    M = 7654319

    E = EllipticCurve(GF(M), [0, 0, 0, a, b])

    base = E([5234568, 2287747])
    pub = E([2366653, 1424308])

    c1 = E([5081741, 6744615])
    c2 = E([610619, 6218])

    X = base

    for i in range(1, M):
    if X == pub:
    secret = i
    print "[+] secret:", i
    break
    else:
    X = X + base
    print i

    #secret = 1584718

    m = c2 - (c1 * secret)

    print "[+] x:", m[0]
    print "[+] y:", m[1]
    print "[+] x+y:", m[0] + m[1]

    # [+] x+y: 5720914
  2. sonickun created this gist Nov 20, 2016.
    46 changes: 46 additions & 0 deletions solver.py
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,46 @@
    a = 1234577
    b = 3213242
    M = 7654319


    def add(A,B):
    if A==(0,0): return B
    if B==(0,0): return A
    x1,y1 = A
    x2,y2 = B
    if A!=B:
    p = (y2-y1)*pow(x2-x1,M-2,M)
    else:
    p = (3*x1*x1+a)*pow(2*y1,M-2,M)
    x3 = p*p-x1-x2
    y3 = p*(x1-x3)-y1
    return (x3%M,y3%M)

    base = (5234568, 2287747)
    pub = (2366653, 1424308)

    crypt = [(5081741, 6744615), (610619, 6218)]


    X = (0,0)

    for i in range(M):
    if X==pub:
    secret = i
    print "secret:" + str(secret)
    break
    X = add(X, base)
    print i

    #secret = 1584718

    tmp =(0,0)

    for i in range(1584718):
    tmp = add(tmp,crypt[0])

    plain = add(crypt[1], (tmp[0],tmp[1]*-1))

    print plain

    # 2171002 + 3549912 = 5720914