I had a conversation some years ago about the use of RSA keys for SSH/SFTP access. Something about how someone wanted a shorter key rather than a longer one. I think with the entirely contrived example we presented the averages were like 4wks for their short key vs about 32 trillion years for the one we recommended.

And that was with one computer trying 1000 times per second.