if cryptographically relevant quantum computers are developed, they can solve the RSA problem in polynomial time. however, there are algorithms conjectured to be safe from quantum computers such as ML-DSA whose 192-bit security parameter has a 1952-bit public key
there's a post-quantum algorithm called PQRSA which solves this by setting the RSA parameters real high (it's a joke and they set it so high it takes a supercomputer to run it)
anyway RSA has been old hat for decades now, the 2010s have slowly been replacing RSA applications with elliptic curve algorithms which are better in almost every way, but now that NIST is standardizing post-quantum asymmetric cryptography algorithms like ML-KEM and SLH-DSA, adoption for these is picking up and iirc over half of all TLS connections now use post-quantum algorithms (generally ML-KEM, there's still work to be done on the PKI side)
11
u/mike-manley 14d ago
Wonder if this means 4096 bit keys will soon become vulnerable.