I was curious why, in less than 20 years, minimum acceptable key sizes have gone from 1024 bits to 4096 bits. That certainly doesn't scale according to Moore's Law. Also, I wonder why there is a constant set in the GnuPG code to limit key generation to 4096 bits. Surely software techniques for working with numbers larger than machine word size have been around forever?