[Cryptography] 1023 nails in the coffin of 1024 RSA...

Hanno Böck hanno at hboeck.de
Sat Oct 4 15:50:51 EDT 2014


Am Sat, 04 Oct 2014 12:08:42 -0700
schrieb ianG <iang at iang.org>:

> (some skepticism about whether this there is really a break in
> OpenSSL, but the rumour mill will no doubt throw mud on the 1024 bit
> part as well...)

I saw this earlier and got curious, but this doesn't make sense from
start to end.

I personally tried if openssl will for whatever reason round 1025/2
down to 513 by inserting a printf at that point for bitsp and bitsq. It
doesn't.

Even if it would it is not clear how N as a product of a 511 and a 513
bit prime should pose any significant risk.


That said: There are good reasons to get rid of 1024 bit rsa. This is
not one of them. It's a very vague rumor with an implausible story.
However it certainly doesn't hurt if a few people look at the supposed
source code and see if there's anything suspicious.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20141004/6a85f2de/attachment.sig>


More information about the cryptography mailing list