Upper bound on RSA