Google DeepMind, with cryptographers from UC San Diego and Inria, says AI agents under human supervision found ways to cut the cost of attacking 1024-bit RSA, SecurityWeek reports.
- Modern 2048-bit and larger keys remain secure. This is about obsolete 1024-bit systems.
- One result: once an attacker controls roughly half or more of a signed block, PKCS#1 v1.5-style padding adds no protection. That matters for some HSM signing interfaces.
- In a sandboxed test, agents re-ran an earlier forgery attack on the same 1024-bit key and cut CPU time about 3.5x. They did not factor the key.
What to do
Inventory anything still on 1024-bit RSA (certs, HSMs, old TLS configs) and move it to 2048-bit or stronger. No attack steps here, just the migration homework.
God Bless, and Happy hacking!
