It is possible to easily decode RSA messages if you know the two prime
factors p and q. The strength of the system is based on the
conjecture that it is extremely hard to factor large integers. In
1977, the year of the challenge, Rivest made some estimates on time of
computation based on 1977 technology. It took less than 7 minutes
on a PDP-10 to test the primality of 130-digit numbers. To find the
first prime number after 2200 took under 45 seconds.
He estimated the time necessary to factor a 126-digit number equal to the
product of two 63-digit primes at 40 quadrillion years (that is,
,
or 4 million estimated lifetimes of the universe).
The estimate proved a shade conservative.
On April 27, 1994, the factorization n=pq with
was announced, after less than eight months of computation by a worldwide
network of computers. It was determined that
The plaintext to the challenge may then be computed as
which translates as
| 20 | 08 | 05 | 00 | 13 | 01 | 07 | 09 | 03 | 00 | 23 | 15 | 18 | 04 | 19 |
| T | H | E | M | A | G | I | C | W | O | R | D | S | ||
| 00 | 01 | 18 | 05 | 00 | 19 | 17 | 21 | 05 | 01 | 13 | 09 | 19 | 08 | 00 |
| A | R | E | S | Q | U | E | A | M | I | S | H | |||
| 15 | 19 | 19 | 09 | 06 | 18 | 01 | 07 | 05 | ||||||
| O | S | S | I | F | R | A | G | E |
The factorization was the result of eight months of computation by a network of hundreds of computers worldwide. On behalf of all those involved, the one hundred dollar reward was duly collected and donated to the GNU project of the Free Software Foundation.