I think the general consensus was not extending RSA key size, but using elliptic curves instead? (But NIST and Brainpool curves aren&#x27;t completely trustworthy and Curve25519 is not yet standardized for OpenPGP, so we&#x27;re practically stuck with RSA at the moment)