"This key may be unsafe"

[Robert J. Hansen]

On 3/7/11 4:03 PM, Charly Avital wrote:
> Are keys whose length is equal or inferior to 1024 bits *unsafe*?

A 1024-bit key is believed to be roughly comparable to an 80-bit
symmetric key.  I am comfortable saying this is a reasonable level of
security for the next few years for people who are not worried about
being targeted by people who can afford to drop a few million dollars on
cryptanalysis.

It is not a wise choice for long-term security, but I am not comfortable
calling it "unsafe" for most users.