TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

A Las Vegas algorithm to solve the elliptic curve discrete logarithm problem [pdf]

90 点作者 aburan28大约 8 年前

6 条评论

brohee大约 8 年前
Interesting, but no more.<p>The commonly used curve P-256 has the prime order 115792089210356248762697446949407573529996955224135760342422259061068512044369.<p>From the paper &quot;The largest group of elliptic group of prime order that we tested is 129159847, in which a discrete logarithm problem was solved.&quot;.
评论 #14041402 未加载
评论 #14025816 未加载
hpsineqepsi大约 8 年前
This algorithm is slower than existing approaches (Pollard&#x27;s rho); the ridiculously small &quot;largest group&quot; that the author considered can be easily tackled in a split second with even inefficient general algorithms such as Shank&#x27;s. It&#x27;s surprising that such a boring non-result made it to the front page of HN.
评论 #14028182 未加载
评论 #14036402 未加载
19eightyfour大约 8 年前
I think in general the technique of introducing some slack in the form of partitions and then constraining those using some property of the specific problem space, in this case linear relations of whether those points lie on some curve, is very strong and has general applicability. Sort of like branch and bound. It&#x27;s nice to see that this author started with a general idea that wasn&#x27;t that fast, and then used a lot of clever details to improve the implementation of that same idea over a number of years.
eximius大约 8 年前
What is the estimated complexity of this attack? It is not clear to me how to use the probability of success formula for an arbitrary keysize.
ecdh大约 8 年前
Uh, wait a second. Is Elliptic Curve Diffie Hellman broken now? Does this work on curves used in TLS?
评论 #14028190 未加载
sokoloff大约 8 年前
We don&#x27;t have to (and shouldn&#x27;t, IMO) American-ize &quot;Monte Carlo&quot;<p>Edit: TIL that they are different. (Thanks for the explanations below! esp: gmfawcett and 1001101)
评论 #14024194 未加载
评论 #14024164 未加载
评论 #14024173 未加载
评论 #14024162 未加载