PGP Encryption Upgraded to 4096-bit RSA Standard

The encryption upgrade announced in August 2025 reflected growing security community awareness that RSA-2048 bit keys, while not yet computationally broken, were approaching the lower bound of acceptable security margins given projected increases in computing capabilities over the next decade.

RSA-4096 bit keys require approximately 2^128 computational operations to factor — a number that exceeds practical attack capability for any currently conceivable computing system, including theoretical near-term quantum computers. The upgrade provides a substantial security margin for communications that may remain in archived or intercepted form for years before any decryption attempt becomes computationally feasible.

Migration Process

The transition was managed automatically by the platform. Existing accounts were prompted to generate new 4096-bit key pairs during their next login session. Legacy 2048-bit encrypted messages remained accessible via each account's archived key, while all new communications defaulted to the upgraded standard from activation date.

The announcement also described improvements to the key exchange process. Account creation now automatically generates a 4096-bit RSA key pair for the user, with the private key encrypted using the user's account password via AES-256. This enables encrypted communications for non-technical users who might otherwise skip PGP configuration entirely — a critical improvement given that skipped PGP setup was identified as a leading cause of exposed communications in previous market security incidents.

Forward Secrecy Improvements

Alongside the key size upgrade, the platform implemented session-level key rotation for active messaging threads. Each communication session generates an ephemeral symmetric key derived from the parties' RSA keys via Diffie-Hellman exchange. This means even if a user's long-term PGP key is compromised, past session communications encrypted with rotated ephemeral keys cannot be retrospectively decrypted.