Comment by upofadown

This article from 2000 is about estimating what would be required to factor 1024 bit RSA:

A Cost-Based Security Analysis of Symmetric and Asymmetric Key Lengths https://cr.yp.to/bib/2000/silverman.pdf

It was a response to the idea that 1024 bit RSA was under threat at the time.