4 ms·

I'm pretty sure RSA 512 was broken a long time ago: https://arstechnica.com/information-technology/2015/10/breaking-512-bit-rsa-with-amazon-ec2-is-a-cinch-so-wh

by ezekg 3y ago

I'm pretty sure RSA 512 was broken a long time ago: https://arstechnica.com/information-technology/2015/10/breaking-512-bit-rsa-with-amazon-ec2-is-a-cinch-so-why-all-the-weak-keys/ https://arstechnica.com/information-technology/2015/10/break...

actinium226 3y ago
Oh wow, didn't realize 512 can already be factored. Thanks for this.
- combat-banana 3y ago
  [flagged]
- JoachimSchipper 3y ago
  RSA-1024 is also a rather aggressive / dangerous choice, even before a quantum computer arrives: NIST SP 800-131A rev2 Table 2 and 5 forbid use of anything below 2048-bit RSA. Academic teams have actually broken up to RSA-829: https://en.m.wikipedia.org/wiki/RSA_Factoring_Challenge https://en.m.wikipedia.org/wiki/RSA_Factoring_Challenge Don’t roll your own crypto - just select a TLS cipher suite using Mozilla’s recommendations - but for hobby purposes, prefer Curve25519 or NIST P-256. Or play around with Kyber, post-quantum crypto is neat.