Great question. Then it follows, if yes, that the state cryptographers may even have solved this long ago but can't disclose it.

With all the leaks lately from inside those places, it would be nice if some basic math results could make it outside.