There&#x27;s nothing new about the math here. 1024 bit DH has been precarious for over a decade, at least since Tromer costed out an RSA-1024 factoring machine.<p>In other words, people a decade ago were <i>also</i> telling you to avoid DH-1024. What we&#x27;re looking at today is a more efficient way of exploiting a bug we&#x27;ve known about for a long time.