1024-bit RSA

A new cryptography paper describes a method for forging 1024-bit RSA signatures in time close to that of the Special Number Field Sieve, the best known algorithm for factoring such keys. The result suggests 1024-bit RSA, still found in older systems, offers less security margin than assumed, renewing calls to migrate to 2048-bit keys or elliptic-curve alternatives.