RSA Factorization: 862- and 896-Bit Modules Cracked – What It Means

TVS News AI, editorially supervised, presents RSA Factorization: 862- and 896-Bit Modules Cracked – What It Means.

Imagine someone casually posting the prime factors of a supposedly secure encryption on X – and the crypto world rubs its eyes in disbelief. That's exactly what happened in September.

According to heise+, Eric Lu and Steve Weis shared the factors of the RSA modules RSA-260 and RSA-896 online. RSA is one of the most widely used asymmetric encryption algorithms ever – without it, secure HTTPS connections, digital signatures, and much more would be unthinkable on today's internet. You use it every day without even realizing it.

What exactly the two researchers did, how much computing time was required, and what consequences their factorization has – the heise+ editorial team is currently working all of that out. Here we summarize what has emerged from the teaser so far.

What Do the Numbers 862 and 896 Bits Mean for RSA?

The RSA Challenge is a kind of public leaderboard of particularly large numbers whose factorization is considered practically impossible. RSA-260 stands in this tradition for a module with 260 decimal digits – which corresponds to roughly 862 bits and thus matches the size specification in the heise+ title exactly. The authors additionally speak of a 896-bit module. If such a number can be broken down into its two prime factors, the corresponding RSA encryption is practically broken.

For comparison: browsers and servers actually negotiate RSA keys with 2048 or 4096 bits, occasionally 3072 bits. The 862- and 896-bit modules just factored are therefore research objects – and significantly smaller than what your browser negotiates daily when establishing an HTTPS connection.

How Serious Is This for Your Security?

Short answer: nothing changes for your daily life for now. RSA with 2048 bits is still considered secure according to the current state of research, and the larger variants even more so. Lu and Weis have not cracked the standard your online banking uses.

Nevertheless, the factorization reported by heise+ reveals something fundamental: the gap between what research can factor and what is deployed in practice is shrinking slowly but steadily. Cryptography teams have been watching this development with eagle eyes for years – and that's exactly why RSA-2048 is only an interim solution on the way to post-quantum-secure algorithms.

What You Need to Know Now

You don't need to do anything. As long as you use a current browser and websites negotiate secure keys, your encryption continues to run in the background via RSA-2048 or stronger methods – though modern servers are increasingly switching to elliptic curve cryptography (ECC) or post-quantum-secure algorithms, which have nothing to do with classical RSA anymore.

Anyone who wants to follow the original posts: Eric Lu and Steve Weis's publications are circulating on X, and the full report is behind the heise+ paywall.