IACR

A new paper posted on the IACR ePrint archive describes a method for forging 1024-bit RSA signatures in time close to that required by the Special Number Field Sieve. The work matters because 1024-bit RSA remains in use in some legacy systems, and any practical improvement in factoring-based attacks weakens the security margin of keys that experts already consider too small.