3 ms·
RSA-1024 is also a rather aggressive / dangerous choice, even before a quantum computer arrives: NIST SP 800-131A rev2 Table 2 and 5 forbid use of anything belo
by JoachimSchipper 3y ago
RSA-1024 is also a rather aggressive / dangerous choice, even before a quantum computer arrives: NIST SP 800-131A rev2 Table 2 and 5 forbid use of anything below 2048-bit RSA. Academic teams have actually broken up to RSA-829: https://en.m.wikipedia.org/wiki/RSA_Factoring_Challenge https://en.m.wikipedia.org/wiki/RSA_Factoring_Challenge
Don’t roll your own crypto - just select a TLS cipher suite using Mozilla’s recommendations - but for hobby purposes, prefer Curve25519 or NIST P-256. Or play around with Kyber, post-quantum crypto is neat.