I'd like to know what is the maximum bits of the finite field that we can solve the ECDLP in a "regular" computer in trivial time. Is there any recent data about this?

  • $\begingroup$ Regular computer time is not clear. Which CPU? which GPU? Maybe you are asking about secure field size? See BlueKrypt, also known as keylength.com. $\endgroup$ – kelalaka Oct 23 '19 at 14:28
  • $\begingroup$ Any reason the information on Wikipedia Discrete logarithm records: Elliptic curves doesn't answer your question? $\endgroup$ – mikeazo Oct 23 '19 at 18:55
  • $\begingroup$ @kelalaka: Why is there such a difference bewteen methods if we select a distant year i.e year 2040? ECRYPT recommends a 15k bit modulus the rest of methods stick to 2-3k bits modulus size. I'm surprised it doesn't include any estimation method for non-conventional crypto (non-commutative, lattice, codes, multivariate etc). $\endgroup$ – kub0x Oct 26 '19 at 18:03
  • $\begingroup$ @kub0x Different measures and predictions. There are links on the below of the table for the bibliography. $\endgroup$ – kelalaka Oct 26 '19 at 18:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.