Notes

Google's Repricing of Eliptic-Curve Cryptography

Google did not discover a new way to break elliptic-curve cryptography. The algorithm is unchanged. What changed is the price. The operational cost to execute a discrete logarithm attack on ECDLP-256 dropped by roughly 20x in physical-qubit requirements, and that single repricing is enough to move the security horizon for every system that ever trusted a secp256k1 signature.