2017.09.07 08:20:25 (905677114384424960) from Daniel J. Bernstein:
Collisions: https://eprint.iacr.org/2017/847 says time N^0.4 using hardware N^0.2. But parallel rho is better: time N^0.35 using hardware N^0.15.
2017.09.07 08:26:37 (905678675106025472) from Daniel J. Bernstein:
The new paper _also_ needs some quantum hardware (rho doesn't), and I don't see analysis of communication costs (rho has low communication).
2017.09.07 08:30:34 (905679668568870912) from Daniel J. Bernstein:
How does the paper portray worse performance numbers as better? By artificially limiting hardware to 1 small "processor" plus huge "memory".
2017.09.07 08:32:31 (905680158241292289) from Daniel J. Bernstein:
Of course most of the algorithms literature makes this mistake. But this paper makes the mistake _and_ incorrectly suggests that it doesn't.