Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by MrXOR on Tuesday October 06, 2020 @12:22PM
(#24699453)
The end of DLP (over any field) is the end of ECC.
[ Parent
| on HN ]
Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by thu2111 on Wednesday October 07, 2020 @04:19AM
(#24706285)
No it isn't. The curves used in all real systems are based on prime fields. The results against binary fields don't seem to generalise to curves deployed in the wild.
Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by MrXOR on Wednesday October 07, 2020 @05:44AM
(#24706632)
Binary fields are weaker than prime fields, but "I think" there are always shortcuts. Finding these shortcuts are hard and some good topics for future research in cryptography.
Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by MrXOR on Wednesday October 07, 2020 @05:57AM
(#24706709)
Hypothetical roadmap for next 10 years: Binary FF DLP --> Prime FF DLP --> EC in prime FF --> RSA? --> ElGamal? --> ...
Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by BlackFingolfin on Tuesday October 06, 2020 @02:42PM
(#24700979)
Why? Is there a reduction from EC DLP to FF DLP?
Re:Computation of a 30750-Bit Binary Field Discrete Logarithm
by MrXOR on Wednesday October 07, 2020 @04:26AM
(#24706307)
There are some attacks like MOV attack [1] and Frey-Rück attack [2].
[1] http://www.dima.unige.it/~morafe/MaterialeCTC/p80-menezes.pd...
[2] https://pdfs.semanticscholar.org/8823/54510ddc955c8d7e13c529...
[3] https://eprint.iacr.org/2015/1022.pdf
PS. I am a beginner in cryptography.