Best algorithms need around sqrt(#bit) steps, so you have about half the exponent level in bit security.