3 ms·
RSA-768 has been factored by academics in 2009[0]. It has long been speculated that NSA can factor 1024bit RSA (or DHE) using custom hardware, which is why in
by wolf550e 12y ago
RSA-768 has been factored by academics in 2009[0].
It has long been speculated that NSA can factor 1024bit RSA (or DHE) using custom hardware, which is why in protocols like TLS and SSH the current recommendation is for keys, certificates and Diffie Hellman key exchange to be at least as strong as RSA-2048 (e.g. 256 bit elliptic curve crypto is strong enough).
0 - https://en.wikipedia.org/wiki/RSA_numbers#RSA-768 https://en.wikipedia.org/wiki/RSA_numbers#RSA-768
- userbinator 12y agoIf I got the maths right, due to the exponential relationship a 760-bit key should on average take roughly 1/256th of the time a 768-bit key takes to factor.
- pbsd 12y agoNo, that is not how factorization scales. The time difference between a 760 and 768-bit modulus is less than a factor of 2.