Ninjastic
PostEdited versionsQuotes to this post
Post
Topic
Board Development & Technical Discussion
Re: Is it really 256 bit? Or is it really 160 bit?
by
Shevek
on 25/04/2013, 08:12:33 UTC
Quote from: gmaxwell on April 24, 2013, 10:02:38 PM

Pollard's lambda algorithm takes sqrt() operations— so roughly 2^128 security.

Thanks for the point. I was unaware of such "Pollard lambda" attack to DL problem; I only knew about "Pollard rho" for factoring.