From: Scott Contini on
On Apr 20, 8:05 am, Nomen Nescio <nob...(a)dizum.com> wrote:
> I doubt anyone will be able to break 1024-bit keys in 2020 and the NSA

The people who factored RSA-768 disagree. Read the intro to their
paper:

"On December 12, 2009, we factored the 768-bit, 232-digit number
RSA-768 by the number
field sieve (NFS, [20]). The number RSA-768 was taken from the now
obsolete RSA Challenge
list [38] as a representative 768-bit RSA modulus (cf. [37]). This
result is a record for factoring
general integers. Factoring a 1024-bit RSA modulus would be about a
thousand times harder,
and a 768-bit RSA modulus is several thousands times harder to factor
than a 512-bit one.
Because the first factorization of a 512-bit RSA modulus was reported
only a decade ago
(cf. [7]) it is not unreasonable to expect that 1024-bit RSA moduli
can be factored well within
the next decade by an academic effort such as ours or the one in [7]."

Scott