In RSA cryptosystem, we generally take 1024 bits long prime numbers p and q. Is any problem if we take 512 bits long prime numbers? What are the security issues may be generated in real time scenario?
Thanks, sir, I agree with you the security level of RSA 512 bits is lower that the security level of RSA 1024 bits. But, I think RSA will not be easily breakable even if we will use 512 bits prime numbers. In RSA cryptosystem, in encryption and decryption procedure no use of p and q prime numbers, only n is required. If you take p and q as 512 bits, then ultimately the maximum length of n is 1024 bits.
I suggest you to use 2048-bits instead of 1024 or 512.
It is proved that both are easily breakable by Super computer by bruteforcing them.
That's why Digital Certificates nowadays use 2048-bit on each of our secure connection to internet.
Thanks, sir, could you provide me that link, where I can read in detail, how RSA 512 bits or RSA 1024 bit is easily breakable by Supercomputer by the bruteforcing attack?
You can check this below link Madam.
ftp.gnome.org/mirror/archive/ftp.sunet.se/pub/security/docs/.../security_estimates.pdf
crypto.stanford.edu/~dabo/courses/cs255_winter03/rsa-lecture.pdf
https://crypto.stanford.edu/~dabo/papers/RSA-survey.pdf
https://lacal.epfl.ch/files/content/sites/lacal/files/papers/ecdl2.pdf
https://martinralbrecht.files.wordpress.com/2015/03/freak-scan1.pdf
https://www.ijcsi.org/papers/IJCSI-9-1-3-175-178.pdf
https://www.sans.org/reading-room/whitepapers/vpns/cryptanalysis-rsa-survey-1006
cs.ucsb.edu/~koc/ccs130h/notes/lenstra.pdf
But let me first justificate, there is no publication shows that the 512-bits and 1024-bits RSA is breakable by the super computer.
The one who has the super computer is RSA, that's why they never publish it.
Correct me if I am wrong.
Best regards
Dea Saka Kurnia Putra.
And excuse me, to open your inbox Madam.
Yes, now 512 bits, its good for communication data, but for long time or database to store data, it's not good . this dependent on implementation, and the machine.
The strength of RSA is measured in key size, which is the number of bits in n=p*q . 512-bit (155 digit) RSA is no longer considered secure, as modern brute force attacks can extract private keys in just hours, and a similar attack was able to extract a 768-bit (232 digit) private key in 2010. As of 2016, 1024-bit (309 digit) keys are considered risky, and most newly generated keys are 4096-bit (1234 digit).
Oky, Sheela, but this depend on our implementation!!! , if the implementation just for security, then 512-bit it's not good,and the maximum size of data which can be encrypted with RSA is more than 245 bytes, but decryption of a large message may become intolerably expensive.
I need codes to encrypt and decode images in Matlab for the following algorithms.
AES, with key 128 bit
AES, with key 256 bit
RSA, with key 1024 bit
RSA, with key 2048 bit
1024 bit RSA is "only" theoretically weak. The largest factored RSA is RSA-240. RSA-240 has 240 decimal digits (795 bits), and was factored in November 2019 by Fabrice Boudot, Pierrick Gaudry, Aurore Guillevic, Nadia Heninger, Emmanuel Thomé and Paul Zimmermann.
Officially RSA 1024 can not be cracked ,however to be compliant with modern standard requirements and preparing for the future You should always use at least 2048 bit modulus.