algorithms

A new cryptography paper describes a method for forging 1024-bit RSA signatures in time close to that of the Special Number Field Sieve, the fastest known factoring algorithm for such keys. The work suggests 1024-bit RSA, already considered below recommended strength, may be weaker than assumed. Readers are discussing the practical feasibility of the attack and what it means for legacy systems still relying on the key size.