You don't know that. We're at the point where the NSA can assuredly break RSA-1024. We know they have sufficient processing power, and it would be silly of them not to have developed that capability.
"But they're not going to spend resources breaking my router!" No, not your router specifically. But batch GCD gives sqrt speedup over multiple keys, potentially 10's to 100's of millions of keys at once with off-the-shelf GPU clusters at NSA scale. Looking at that many keys at once tends to discover low-entropy biases common in consumer router hardware, which makes brute-forcing new keys from those devices trivial to do.
If you are actually operating a service relying on RSA-1024 security, it is almost certainly pwoned.
If you are actually operating a service relying on RSA-1024 security, it is almost certainly pwoned.
If you're running something with code from a large US corporation, or outsourced to contractors, or made in China, or with a web interface, or [3 more pages of stuff] and your main worry is the size of your RSA keys, then I've got a Fortigate security appliance to sell you.
I would have formulated it less dismissively than my sibling but yes. There are ~no scenarios, where the Cloud act is not the more straightforward solution. Even factoring RSA-1024 will take non-zero compute time. And that can be spend more productively
Comments
You don't know that. We're at the point where the NSA can assuredly break RSA-1024. We know they have sufficient processing power, and it would be silly of them not to have developed that capability.
"But they're not going to spend resources breaking my router!" No, not your router specifically. But batch GCD gives sqrt speedup over multiple keys, potentially 10's to 100's of millions of keys at once with off-the-shelf GPU clusters at NSA scale. Looking at that many keys at once tends to discover low-entropy biases common in consumer router hardware, which makes brute-forcing new keys from those devices trivial to do.
If you are actually operating a service relying on RSA-1024 security, it is almost certainly pwoned.
If you're running something with code from a large US corporation, or outsourced to contractors, or made in China, or with a web interface, or [3 more pages of stuff] and your main worry is the size of your RSA keys, then I've got a Fortigate security appliance to sell you.
I would have formulated it less dismissively than my sibling but yes. There are ~no scenarios, where the Cloud act is not the more straightforward solution. Even factoring RSA-1024 will take non-zero compute time. And that can be spend more productively