1024-bit RSA

A new cryptography paper describes forging 1024-bit RSA signatures in nearly the time a special number field sieve would take, raising questions about the security margin of legacy RSA key sizes still used in older systems and certificates. The work is being discussed by security engineers weighing whether 1024-bit RSA should now be considered practically broken and how quickly remaining deployments should migrate to 2048-bit or larger keys.