According to RSA Factoring Challenge 829 bits were broken recently [0]. The total computation time was roughly 2700 core-years [1]. I would consider 1024 bits

According to RSA Factoring Challenge 829 bits were broken recently [0]. The total computation time was roughly 2700 core-years [1]. I would consider 1024 bits risky in the following 10 years. 2048 bits probably won't ever be broken without significant algorithmic breakthrough or quantum computers. [0] https://en.wikipedia.org/wiki/RSA_Factoring_Challenge https://en.wikipedia.org/wiki/RSA_Factoring_Challenge [1] https://lists.gforge.inria.fr/pipermail/cado-nfs-discuss/2020-February/001166.html https://lists.gforge.inria.fr/pipermail/cado-nfs-discuss/202...