For nearly half a century, one unassuming piece of mathematics has quietly held the digital world together. The RSA algorithm — a public-key cryptosystem born in a quiet MIT lab in 1977 — still encrypts your bank logins, your HTTPS connections, and the cold-storage wallets that safeguard billions in crypto. Understanding how RSA works isn't just academic curiosity anymore; it's survival literacy in an era where Web3, AI, and global finance all rest on the same asymmetric backbone.

What Exactly Is the RSA Algorithm?

RSA — named after its inventors Ron Rivest, Adi Shamir, and Leonard Adleman — is the original public-key encryption scheme. Before RSA, anyone who wanted to send a secret message had to share a secret key in advance, an obvious logistical nightmare. RSA flipped the script: it uses a pair of mathematically linked keys, one public, one private.

The beauty is in the asymmetry. Anyone can use your public key to scramble a message, but only your private key can unscramble it. This simple inversion solved the key-exchange problem that haunted cryptographers for centuries and became the foundation for protocols like TLS, SSH, and PGP.

Think of RSA like a mailbox with a slot anyone can drop letters through, but only you hold the key to open it.

How RSA Actually Works (Without the Headache)

Strip away the jargon and RSA is built on one elegant trick: multiplying two giant primes is easy, but factoring their product back into primes is brutally hard — even for the most powerful supercomputers on Earth.

The Key Generation Step

  • Pick two large primes. Today, RSA keys use 2048 or 4096 bits, meaning the primes are hundreds of decimal digits long.
  • Multiply them together to create the modulus, the public half of your key.
  • Compute a public exponent (usually 65537) and a private exponent that is the modular inverse of the public one.
  • Publish the modulus and public exponent, guard the private exponent like a vault combination.

Encrypt, Send, Decrypt

When Alice wants to send Bob a secret message, she grabs his public key, raises her plaintext to the public exponent, takes the modulus, and ships the result. Bob applies his private exponent to the ciphertext and — like magic — the original message pops out. The same math, in reverse, also powers digital signatures: Bob signs with his private key, and anyone with his public key can verify he really sent it.

Where You'll Still Find RSA in 2025

You might assume RSA has been quietly phased out. It hasn't. It's still everywhere:

  • HTTPS / TLS handshakes that secure nearly every website you visit.
  • Email encryption via PGP and S/MIME standards.
  • Code signing certificates that prove software updates are legitimate.
  • Cryptocurrency wallets and signing infrastructure, especially for legacy Bitcoin and Ethereum addresses.
  • Government and banking systems where compliance rules demand conservative, audited algorithms.

Many modern stacks use a hybrid approach — RSA to securely exchange a symmetric key (like AES), then AES for the bulk encryption because it's dramatically faster. This belt-and-suspenders strategy is what keeps your credit-card number safe when you check out online.

The Cracks Showing in RSA's Armor

RSA isn't invincible. Three forces are squeezing it from different angles.

First, key length inflation. As computers get faster, the recommended RSA key size keeps climbing. What was safe in 2000 (1024-bit) is now considered breakable. Most experts insist on 2048-bit minimum, with 4096-bit preferred for long-term secrets. The longer the key, the slower the math — and that overhead matters on phones and IoT devices.

Second, the quantum elephant. Shor's algorithm, run on a sufficiently large quantum computer, can factor large numbers in polynomial time. A cryptographically relevant quantum machine doesn't exist publicly yet, but the "harvest now, decrypt later" threat has governments and crypto projects racing to migrate to post-quantum cryptography like CRYSTALS-Kyber and CRYSTALS-Dilithium.

Third, implementation disasters. Side-channel attacks, padding-oracle bugs (think BLEICHENBACHER '98 and ROBOT), and poor random-number generation have broken real-world RSA more often than the math itself. Algorithm: solid. Humans deploying it: often not.

The Rise of Elliptic Curve and Post-Quantum Alternatives

ECDSA and Ed25519 now dominate crypto wallet signatures because they deliver equivalent security with far smaller keys. Meanwhile, NIST finalized its first post-quantum standards in 2024, signaling the beginning of the end for classical RSA in high-security contexts.

Key Takeaways

RSA is the senior citizen of modern cryptography — slower than its younger cousins, heavier on resources, and staring down a quantum-shaped retirement plan. But it's also battle-tested, universally understood, and still securing a startling amount of the world's data.

  • RSA uses a public/private key pair built on the difficulty of factoring large prime products.
  • It powers HTTPS, email encryption, code signing, and many crypto wallets.
  • Bigger keys (2048–4096 bits) are mandatory in 2025.
  • Quantum computing is the looming existential threat, driving the move to post-quantum standards.
  • For now, RSA remains the default trust anchor of the public internet — and understanding it is still worth your time.