On November 6, 2026, Pushmeet Kohli, VP and Chief Scientist of Google DeepMind, announced on X (formerly Twitter) that DeepMind's science team achieved two significant cryptographic advances: AI agents identified two weaknesses in legacy 1024-bit RSA schemes in a matter of weeks — work that would have taken years with traditional methods (source: Pushmeet Kohli / X, Interesting Engineering).
What Did Google DeepMind Announce?
DeepMind's AI agents, working under human supervision alongside leading cryptanalysis experts, uncovered two specific vulnerabilities: (1) a digital signature padding result and (2) a batch-factoring method that reduces the average cost of factoring each additional RSA-1024 key by approximately 30 times compared to prior best methods. In one specific theoretical setting, the speedup reaches up to 1,600 times. DeepMind explicitly stated that modern 2048-bit or larger keys — the current industry standard — are not affected by these findings.
"AI's ability to accelerate cryptanalysis of legacy standards in weeks rather than years confirms that organizations still relying on outdated encryption need to migrate — not eventually, but now."
Davarion Group & LabsWhat Changes for SMBs
- 01Immediately audit whether any internal, legacy, or third-party system still uses 1024-bit RSA keys: old VPNs, expired SSL/TLS certificates, outdated document-signing software.
- 02Require software and cloud vendors to confirm their systems use at least 2048-bit keys (the current minimum standard) or preferably 4096-bit or elliptic curve cryptography (ECC).
- 03Real risk: if your business uses SaaS solutions or hardware that hasn't been updated since before 2015, there's a higher chance it still relies on RSA-1024.
- 04Recommended action: ask your IT or security provider for an inventory of active certificates and cryptographic keys before year-end.
This finding is not an immediate threat to businesses using modern infrastructure, but it signals a paradigm shift: AI is no longer just a productivity tool — it is now an offensive instrument in the hands of security researchers (and potentially bad actors with access to similar resources). SMBs that rely on SaaS software should verify that their vendors maintain up-to-date encryption standards.
At Davarion Group & Labs, we help Houston businesses evaluate which AI tools are appropriate for their context, including security posture reviews as part of automation projects. If you have questions about whether your digital infrastructure aligns with current standards, reach out for an initial conversation.
