2026.07.24 15:56:39 (Mastodon 116975769996105342, Twitter 2080683597326078187) from Daniel J. Bernstein:
Costs times p^(o(1)) for general supersingular-isogeny attacks: 2006 https://eprint.iacr.org/2006/021: p^(1/2) using p^(1/2) memory. 2013 https://arxiv.org/abs/1310.7789: p^(1/2) using negligible memory. 2026 https://eprint.iacr.org/2026/1486: p^(1/3) using p^(1/3) memory. When will exponents drop next? 1. 2026-2030 2. 2031-2035 3. 2036-2040 4. 2041 or later or never