Skip to main content

ecdlp_bsgs

Function ecdlp_bsgs 

Source
pub fn ecdlp_bsgs(
    curve: &Curve,
    base: &Point,
    target: &Point,
    n: u64,
) -> Option<BigInt>
Expand description

Solve the elliptic-curve discrete log Q = k·P by baby-step/giant-step, given the order n of P. O(√n) group operations — the best generic attack, and exponential in the bit length. This is exactly why a sound (large prime-order) curve resists, and why ECC uses far smaller keys than RSA. None if Q is not a multiple of P.