1024-bit RSA

A new cryptography paper describes a method for forging 1024-bit RSA signatures in time close to the special number field sieve, the fastest known approach for factoring such keys. The work suggests that 1024-bit RSA, long considered too expensive to break in practice, is closer to the reach of well-resourced attackers than previously assumed.