#number-field-sieve

The Log Was Never the Weak Part: How Discrete-Log Cryptography Actually Breaks

Jul 17, 2026

For a well-chosen group the discrete log is optimally hard. Every faster break exploits the group's structure, not the log -- only Shor survives a clean one.