PDA

View Full Version : RSA 576 factored !


gkweb
December 5th, 2003, 04:41 PM
from RSA official website:
-{ Quote: "
The RSA algorithm works as follows: take two large primes, p and q, and compute their product n = pq; n is called the modulus. Choose a number, e, less than n and relatively prime to (p-1)(q-1), which means e and (p-1)(q-1) have no common factors except 1. Find another number d such that (ed - 1) is divisible by (p-1)(q-1). The values e and d are called the public and private exponents, respectively. The public key is the pair (n, e); the private key is (n, d). The factors p and q may be destroyed or kept with the private key.
" }-

the important point :
-{ Quote: "
It is currently difficult to obtain the private key d from the public key (n, e). However if one could factor n into p and q, then one could obtain the private key d. Thus the security of the RSA system is based on the assumption that factoring is difficult. The discovery of an easy method of factoring would "break" RSA (see Question 3.1.3 and Question 2.3.3).
" }-

the news : RSA 576 has been factored the December 3 2003, so broken.

=> http://mathworld.wolfram.com/news/2003-12-05/rsa/

RSA 2048 used in CS seems to have a gap of security and so is still safe, but i find interresting that supposed unbreakable algorithm in fact are.
So i agree with CS to use in RinjDael & Twofish 256 bits keys instead of 128, in addition the CS protocol increases by far brute force attempt so no need to worry at all :)

FanJ
December 5th, 2003, 05:31 PM
Thanks for the info Gkweb !!!


Some, off topic, notes by me:

1.
I would love to read the comments from luv2bsecure, mod at the Privacy forum.
Dear John,
I wish you all the very best from the bottom of my heart.
I sooo very much would love to have contact again with you.
Please please let us know how you are doing.
Most warmest regards to you and Tracey !!!

2.
I would love to read the comment from Bruce Schneider.

3.
Jason and Wayne,
I hope you have received my email with some remarks.
Well, it's almost weekend, I know ;)


Cheers, Jan.

Jason_R0
December 5th, 2003, 11:39 PM
In future builds I will probably increase RSA to 4096bit or use another public key system, like Elliptic curves. For now though RSA-2048bit is still very secure so it isn't really a problem for CS users :)

Jan, I'll have to take a look at the mail on Monday (it's the weekend here and I don't have access to the mail :) )

-Jason-

gkweb
December 6th, 2003, 09:30 AM
RSA 4096 would be very nice :D