Skip to main content
1 vote
Accepted

Complexity of DLP vs ECDLP in MOV attack

Note that $O(\sqrt{p})$ is $\exp\big((\frac12+o(1))\log p\big)$, so exponential in $\log p$, whereas the complexity for the DLP is exponential in $(\log p)^{1/3}$ up to polynomial factors. ...
Mehdi Tibouchi's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible