Security estimates for 512-bit RSA
Matthew J. B. Robshaw · Proceedings of WESCON'95 · 2002
In this note we address the short-term security o ered by the use of a 512-bit RSA modulus. Following recent tremendous improvements to the practicality of the generalized number eld sieve, it must be expected that by the end of next year, a 512-bit RSA number will have been factored. However, for those elded systems which use 512-bit RSA, what are the implications? Some systems may well continue using 512-bit RSA long after one particular 512-bit RSA number has been factored. In this note, we present data which might provide answers to questions about the continuing use of a 512-bit RSA modulus. Copyright c 1995 RSA Laboratories, a division of RSA Data Security, Inc. RSA Data Security Inc. part number 003-903059-100-000-000