[cryptography] cryptanalysis of 923-bit ECC?

Matthew Green matthewdgreen at gmail.com
Fri Jun 22 16:24:36 EDT 2012

> I don't understand the last few posts here. In the paper linked to by
> Samuel Neves:
> http://eprint.iacr.org/2012/042
> Table 3, towards the top. (I read that as 2^53 steps.)
> So to me, the recent result is "we verified computationally that our
> analysis is correct".
> Maybe my brain is too simple.

You're exactly right. (In your characterization of the result, not your brain.) I think it's actually a little less than 2^53, but close enough.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.randombit.net/pipermail/cryptography/attachments/20120622/b613b6b4/attachment.html>

More information about the cryptography mailing list