| Additional Information | In the introduction of their report on "Factorization of a 768-Bit RSA Modulus" in 2010, Thorsten Kleinjung et al. stated the following:
"The Because the factorization of a 512-bit RSA modulus was first reported in 1999, it is not unreasonable to expect that 1024-bit RSA moduli can be factored well within the next decade by a similar academic effort. Thus, it would be prudent to phase out usage of 1024-bit RSA within the next three to four years." (so between 2013 and 2014, Source: https://eprint.iacr.org/2010/006.pdf )
The "Algorithms, Key Sizes and Parameters Report" by the European Union Agency for Network and Information Security (ENISA), released in November 2014, recommends RSA key sizes of 3072 bit length for short term usage (until about 2023). ( Source: https://www.enisa.europa.eu/activities/identity-and-trust/library/deliverables/algorithms-key-size-and-parameters-report-2014 )
The German "Bundesnetzagentur" in their "Algorithmenkatalog" of 2013 recommends RSA keys of at least 2048 bit length to be secure until 2019. ( Source: https://www.bundesnetzagentur.de/SharedDocs/Downloads/DE/Sachgebiete/QES/Veroeffentlichungen/Algorithmen/2013Algorithmenkatalog.pdf?__blob=publicationFile&v=1 )
The German "Bundesamt für Sicherheit in der Informationstechnik" (BSI) in 2015 states a current minimum RSA key length of 2000 bits. Also it is stated, that starting in 2017 it is planned to recommend the removal of all RSA key sizes lower than 3000 bit. (Source: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/TechnischeRichtlinien/TR02102/BSI-TR-02102_pdf.pdf?__blob=publicationFile ) |
|---|
