3 ms·
An 2048 bit RSA key has 112 bits of security, but not necessarily 2048 bits of entropy. RSA 2048 only has about ~112 bits of security because there are faster-t
by bmurray7jhu 5y ago
An 2048 bit RSA key has 112 bits of security, but not necessarily 2048 bits of entropy. RSA 2048 only has about ~112 bits of security because there are faster-than-brute-force algorithms for integer factorization.
A 2048 bit RSA key is generated from two 1024 bit primes. Let's assume we randomly choose each prime from the range 2^1023 to 2^1024. Per the Prime Number Theorem, there are ~ N / ln (N) primes below N. That means that there are 2^1024 / (1024 ln 2) - 2^1023 / (1023 ln 2) ≈ 1.3e305 1024-bit primes. It follows that a 1024 bit prime has ~1023 bits of entropy and that a 2048 bit RSA key has ~2022 bits of entropy.
- labawi 5y ago2048 bit RSA can have at most ~2022 bits of entropy. It can and often does have much less¹, depending on how the keys were generated (debian). That may or may not be an issue, depending on the resulting distribution of keys, i.e. how usable is the information that only a teeny fraction of keys are possible (Infineon). ¹ Entropy interpreted as the number of possible, roughly equal-likelihood outcomes.