ROCA vulnerability – full paper in ACM Digital Library

ACM has just published the full paper in its Digital Library at

https://dl.acm.org/citation.cfm?id=3133969

Some interesting charts of the CPU cycles needed for particular key lengths - mostly academical, with the notable exception of 3k keys. The cost of the attack of 2k RSA keys seems to be derived from Amazon EC2 x2 instance (2 cores) - my feeling is that the cost is fairly conservative. GPU-optimized versions are bound to make 2k key cracking quite affordable.