<<< Date Index >>>     <<< Thread Index >>>

Cryptoanalyse zu RSA 1024



Eigentlich interessant. Ich frage mich nur, wieviel davon vom Begehren 
nach publicity gesteuert ist. 

http://www.madchat.org/crypto/cbtwirl.pdf


---------------------------CUT--------------------------------
It has been often claimed that 1024-bit RSA keys are safe for the next 
15 to 20 years, since when applying the Number Field Sieve to such 
composites both the sieving step and the linear algebra step would be 
unfeasible (e.g., [4, 21] and a NIST guideline draft [16]). However, 
these estimates relied on PC-based implementations. We presented a new 
design for a custombuilt hardware implementation of the sieving step, 
which relies on algorithms that are highly tuned for the available 
technology. With appropriate settings of the NFS parameters, this 
design reduces the cost of sieving to about $10M (plus a one-time cost 
of $20M). Recent works [14, 9] indicate that for these NFS parameters, 
the cost of the matrix step is even lower.



---------------------------CUT--------------------------------

Attachment: pgpP3mC4hznkH.pgp
Description: PGP signature