DeepMind Finds Flaws in 1024-Bit RSA Encryption
Google DeepMind researchers report two weaknesses affecting legacy 1024-bit RSA systems, though larger key sizes are not claimed to be at immediate risk.
Updated on Nov. 6, 2026 in Cybersecurity
Google DeepMind announced on November 6, 2026 that it had identified two distinct weaknesses in legacy 1024-bit RSA encryption. The first enables the forgery of digital signatures, while the second is a new algorithm that lowers the cost of batch factoring for related moduli.
Why it matters
RSA underpins many digital signatures and secure communications, so weaknesses in older key sizes raise concerns for systems still relying on them. The research does not claim that 2048-bit or larger keys face immediate risk, which limits the scope of the immediate threat.
The research identified two vulnerabilities in 1024-bit RSA systems, with the batch factoring algorithm lowering attack costs for related moduli by attacking many moduli at once. The extraction does not provide measured attack costs or the number of affected systems.
The players
Google DeepMind
Google's artificial intelligence research laboratory, known for advances in machine learning and scientific discovery.
Nadia Heninger
A cryptography researcher known for work on the security of public-key cryptographic implementations.
Emmanuel Thomé
A cryptography researcher known for work on factoring algorithms and computational number theory.
The details
DeepMind researchers Dj Dvijotham and Abhradeep Thakurta led the work, collaborating with cryptography experts Nadia Heninger and Emmanuel Thomé. AI models working under human direction identified the two weaknesses, which were announced alongside the new batch-attack algorithm.
Timeline
November 6, 2026: Google DeepMind announces the RSA findings.
The Tech Race
RSA with 1024-bit keys has long been a standard for securing digital communications, and the move toward 2048-bit keys reflects the industry's response to rising computational power. This DeepMind finding adds to that trajectory by showing that AI-assisted analysis can surface weaknesses in legacy key sizes.
Systems still relying on 1024-bit RSA keys for digital signatures may face forgery risks. The research does not indicate that 2048-bit or larger keys face immediate risk.
The takeaway
Organizations still using 1024-bit RSA keys should review whether they can move to larger key sizes. Staying current with cryptographic guidance helps reduce exposure as new research emerges.
Further reading
Explore more on Cybersecurity to see how encryption weaknesses are assessed and addressed.
