2026.07.24 17:02:25 (Mastodon 116976028574661872, Twitter 2080700149387644948) from Daniel J. Bernstein:
Now wondering what happens to the claw-finding inside https://eprint.iacr.org/2026/1486 if the internal degrees are allowed to go up to, say, p^(1/5) instead of p^(1/6). Bigger space to work with is nicer for vOW; are there many more collisions, as in subset-sum algorithms from HGJ etc.?