[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-attack-could-make-cracking-raw-rsa-encryption-easier":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},7977,"new-attack-could-make-cracking-raw-rsa-encryption-easier","New Attack Could Make Cracking Raw RSA Encryption Easier","A new academic attack cuts the computing power needed to crack textbook RSA keys, though it still requires billions of queries against a live oracle.","A new academic attack could cut the computing cost of cracking a specific flavor of RSA encryption by orders of magnitude, and it hasn't been peer-reviewed yet.\n\nResearchers from UC San Diego and Inria Nancy published findings on an attack against textbook (or raw) RSA, an unpadded variant used less for everyday web traffic and more for things like Cloudflare's Privacy Pass, Apple's iCloud Private Relay and Private Cloud Compute, and hardware such as smart cards, USB security tokens, HSMs and TPMs that rely on the PKCS #11 standard. If the math holds up, the number of operations needed to crack a key drops sharply, for a 1024-bit key from roughly 2^80 operations down to about 2^65. The team tested the approach against real Thales Luna HSMs in both hardware and cloud service form. The catch is that an attacker first needs to query the target's encryption oracle billions of times, which is likely to trip IP bans and abuse alerts on any well-monitored service.\n\nThe scarier part is not today's math but tomorrow's. The researchers say their implementation is unoptimized, and GPUs or AI-assisted optimization could push the numbers down further, meaning encrypted traffic captured and stored today could become crackable within weeks or months. Textbook RSA is not what protects your bank's website, but it is quietly embedded in privacy-focused services and hardware security modules that people assume are bulletproof.\n\nRSA has been losing ground to ECC and post-quantum schemes for years; this is one more reason for anyone still leaning on it to check exactly which variant they are using.","[\"rsa\",\"encryption\",\"cryptography\",\"security-research\"]","2026-09-26T12:00:00.000Z","2026-09-26T13:14:00.427Z","2026-09-26T13:14:06.390Z","published",null,[],"security",[26,27,28,29],"rsa","encryption","cryptography","security-research",[31],{"name":32,"url":33},"Tom's Hardware","https:\u002F\u002Fwww.tomshardware.com\u002Ftech-industry\u002Fcyber-security\u002Fnovel-attack-on-rsa-cryptography-might-bring-computation-requirements-for-cracking-down-to-manageable-levels",0,{"sections":36},[37,42,45,50,55,60,64,69,74,79,84,89,93,98],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",4631,"2026-09-26T16:59:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":18},"Security",750,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",395,"2026-09-26T16:41:00.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",260,"2026-09-26T09:00:00.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",185,"2026-09-25T15:00:22.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":54},"Science","science",144,{"name":65,"slug":66,"count":67,"latest_published_at":68},"Consumer Tech","consumer-tech",135,"2026-09-26T14:30:00.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Software","software",90,"2026-09-25T20:55:00.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",84,"2026-09-26T04:20:58.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",76,"2026-09-25T18:33:59.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",48,"2026-09-25T18:35:21.000Z",{"name":90,"slug":91,"count":87,"latest_published_at":92},"General","general","2026-09-26T17:02:42.000Z",{"name":94,"slug":95,"count":96,"latest_published_at":97},"Reviews","reviews",30,"2026-09-24T20:07:31.000Z",{"name":99,"slug":100,"count":101,"latest_published_at":102},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]