The Magic Words are Squeamish Ossifrage

From Wikipedia, the free encyclopedia
Jump to: navigation, search

The text "The Magic Words are Squeamish Ossifrage" was the solution to a challenge ciphertext posed by the inventors of the RSA cipher in 1977. The problem appeared in Martin Gardner's Mathematical Games column in Scientific American.[1] It was solved in 1993–1994 by a large joint computer project co-ordinated by Derek Atkins, Michael Graff, Arjen Lenstra and Paul Leyland.[2][3][4] More than 600 volunteers contributed CPU time from about 1,600 machines (two of which were fax machines) over six months. The coordination was done via the Internet and was one of the first such projects.

Ossifrage ('bone-breaker', from Latin) is an older name for the bearded vulture, a scavenger famous for dropping animal bones and live tortoises onto rocks to crack them open. The 1993–1994 effort began the tradition of using the words "squeamish ossifrage" in cryptanalytic challenges.

The difficulty of breaking the RSA cipher — recovering a plaintext message given a ciphertext and the public key — is connected to the difficulty of factoring large numbers. While it is not known whether the two problems are mathematically equivalent, factoring is currently the only method of directly breaking RSA. The decryption of the 1977 ciphertext involved the factoring of a 129-digit number, RSA-129, in order to recover the plaintext.

Ron Rivest estimated in 1977 that factoring a 125-digit number would require 40 quadrillion years, even with the highly conservative assumption that modular multiplication could be carried out in a nanosecond; he therefore then believed that RSA-129 could never be broken in practice. What he failed to take into account was the possibility of progress in factoring algorithms, and a lot of progress was made in the following decades. Atkins et al. used the quadratic sieve algorithm invented by Carl Pomerance in 1981. While the asymptotically faster number field sieve had just been invented, it was not clear at the time that it would be better than the quadratic sieve for 129-digit numbers. The memory requirements of the newer algorithm were also a concern.[5]

There was a US$100 prize associated with the challenge, which the winners donated to the Free Software Foundation.

See also[edit]


  1. ^ Singh, Simon (1999). The Code Book: The Science of Secrecy From Ancient Egypt To Quantum Cryptography (First Anchor Books ed.). New York: Anchor Books. p. 278. ISBN 0-385-49532-3. 
  2. ^ Atkins, Derek; Graff, Michael; Lenstra, Arjen K.; Leyland, Paul C. (1994). The Magic Words are Squeamish Ossifrage. Proceedings of Asiacrypt '94 (Springer-Verlag). pp. 263–277. doi:10.1007/BFb0000440. ISBN 3-540-59339-X. 
  3. ^ Yan, Song Y. (28 November 2012). Computational Number Theory and Modern Cryptography. John Wiley & Sons. pp. 1–. ISBN 978-1-118-18861-3. 
  4. ^ Hayes, Brian (July 1994). "The Magic Words are Squeamish Ossifrage" (PDF). Retrieved 28 September 2015. 
  5. ^ Stinson, D. R. (1995). "RSA, Factoring, and Squeamish Ossifrage". University of Waterloo. Retrieved 28 September 2015. , Supplementary Material to the 1995 edition of his Cryptography Theory and Practice, see web page.

External links[edit]