Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Can I say that 128 bit using AES provide more security than 1024 using RSA?

share|improve this question
This isn't really about key-size. For example Threefish with a 1024 bit key has performance comparable to AES, not RSA. –  CodesInChaos Jun 25 '13 at 19:36
i meant security by performance not time consuming –  BOB Jun 25 '13 at 20:22
Performance is measured by execution within a timeframe on a certain machine. How else would you measure performance? –  Lucas Kauffman Jun 25 '13 at 22:18
add comment

2 Answers

They're not really directly comparable. The number commonly bandied about is 2048-bit RSA is about equivalent to 128-bit AES. But that number shouldn't be relied on without understanding the caveats.

Currently the most effective way of breaking AES crypto (and any other unbroken symmetric cipher, for that matter) is brute-force. You simply try every possibility until you reach the correct result.

This means that it is possible, and well within today's technology, to encrypt data that (assuming no better attack is ever found--not a horrible assumption), can never be broken, ever, by anyone. Simply use enough bits in your key such that there isn't enough energy in the universe to try enough candidate keys. The numbers are smaller than you'd think:

Indeed, with AES, 128-bit is secure against modern technology, 256 is secure against any likely future technology, and 512 is probably secure against even never-imagined hypothetical alien technology.

Symmetric encryption, if not broken, doesn't leave you with a math problem to solve. The numbers are truly and literally scrambled, and the system is devised such the brute-force is by far the most efficient solution.

Breaking RSA, on the other hand, is not so hard. Instead of brute-forcing the keys, you factor the modulus into primes and derive the keys yourself. This is dramatically simpler to do. It's a math problem, and we can do math.

Specifically, the speed at which primes can be factored is increasing FASTER than the speed at which symmetric keys can be brute-forced. And that's with today's technology.

But going forward, assuming quantum computers can be improved such that qbit operations are a cheap as bit operations (which many people thinks is fairly close; this century at most, possibly decades), then no matter how large you make your RSA key, breaking the key is as fast as encrypting.

So the moral of the story is this:

The "equivalent security" of RSA key length versus AES key length changes over time. Every so often, you have to increase your RSA key size relative to your AES key size to account for technological advances. And even then, it's an estimate at best.

And while a 256-bit symmetric key should be secure for hundreds, thousands, or perhaps hundreds of thousands of years, no RSA key of any length should be assumed to be secure more than a few dozen years out, since RSA is expected to be completely and utterly broken by Shor's algorithm.

share|improve this answer
add comment

Any commonly used symmetric encryption algorithm (DES,3DES, AES,...) is normally faster than RSA.

From a similar question on stack overflow:

Yes, purely asymmetric encryption is much slower than symmetric cyphers (like DES or AES), which is why real applications use hybrid cryptography: The expensive public-key operations are performed only to encrypt (and exchange) an encryption key for the symmetric algorithm that is going to be used for encrypting the real message.

The problem that public-key cryptography solves is that there is no shared secret. With a symmetric encryption you have to trust all involved parties to keep the key secret. This issue should be a much bigger concern than performance (which can be mitigated with a hybrid approach)


Also have a look at this paper: http://ijsr.net/archive/v2i4/IJSRON120134.pdf The following graph on performance was taken from it: enter image description here

share|improve this answer
Any [common symmetric algorithm] is faster than AES? Typo? :) –  SteveS Jun 25 '13 at 18:28
Fixed that, thanks :) –  Lucas Kauffman Jun 25 '13 at 18:31
that's not the case, i am working on a certain protocol that use asymmetric encryption and proposed a scheme to distribute key and use symmetric enc, and i need to compare performance can i compare 1024 RSA to 128 AES and say they provide the same security looking at some paper i found that 128 bit AES need time to be cracked the same as 2300 bit RSS. another question from what you have posted does encryption consume more time then decryption –  BOB Jun 25 '13 at 20:11
The numbers suggest it does. –  Lucas Kauffman Jun 25 '13 at 20:13
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.