Cryptographer Matthew Green: clever subexponential ECDLP claim has zero practical impact

matthew_d_green · x · 2026-10-29

Cryptographer Matthew Green commented on a claimed asymptotically subexponential algorithm for ECDLP based on ETH results, calling it very clever but with "zero practical implications whatsoever." Per the shared derivation, the decomposition-network size is s≈Kmb with m≈19, giving a required scale of b≈2^131072/(19K)≈2.1×10^39455/K bits — astronomically beyond feasibility. His quip: we now (purportedly) know at what curve sizes elliptic curves aren't a generic group.

Related event: Cryptographer calls claimed subexponential ECDLP algorithm clever but practically irrelevant(2 posts)→

Original post →

More from Safety

Safety channel →