 However, Rivest, Shamir, and Adleman noted, in section IX/D of their paper, that they had not found a proof that inverting RSA is equally as hard as factoring., the largest factored RSA number was 795 bits long (240 decimal digits, see RSA-240).Its factorization, by a state-of-the-art distributed implementation, took around 900 CPU years.