Kleinjung, ThorstenAoki, KazumaroFranke, JensLenstra, Arjen K.Thome, EmmanuelBos, Joppe WillemGaudry, PierrickKruppa, AlexanderMontgomery, Peter L.Osvik, Dag ArneRiele, Herman TeTimofeev, AndreyZimmermann, Paul2011-03-292011-03-292011-03-29201010.1007/978-3-642-14623-7_18https://infoscience.epfl.ch/handle/20.500.14299/65770WOS:000286369200018This paper reports on the factorization of the 768-bit number RSA-768 by the number field sieve factoring method and discusses some implications for RSA.Rsanumber field sieveNumber-Field SieveBlock Wiedemann AlgorithmLinear-EquationsGf(2)text::conference output::conference proceedings::conference paper