Re: [Cfrg] 1024 bit RSA

I think the informal position would be that it is still beyond the
capabilities of parties using public resources and methods but nobody would
be in the least surprised if the big SIGINT agencies like NSA and GCHQ were
breaking them.

The longest RSA challenge factored was RSA 768 in 2009:

https://en.wikipedia.org/wiki/RSA_Factoring_Challenge

RSA 704 was broken this year which shows people are still active. That
effort looks like the type of thing you would do before a challenge on
RSA896 which I expect to fall before 2020.

So expect RSA 1024 to certainly fall by 2030 and probably by 2025.

On Fri, Nov 4, 2016 at 11:29 AM, Erik Andersen <era@x500.eu> wrote:

> I participate in IT smart grid standardization within IEC TC57 WG15. A
> couple of standards under development still allow 1024 bit RSA keys for
> so-called backward compatibility. I have so far not been able to change
> that. My question is now. Is there any information available for how long
> time or how much effort it takes to break  a 1024 bit RSA key?
>
>
>
> Erik
>
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg
>
>