New study estimates cryptanalysis effort for public-key algorithms
Key Takeaway
A new research project uses published literature to estimate the cumulative human-hours spent attacking various public-key cryptographic assumptions.
Summary
Researchers have launched a site that quantifies the amount of cryptanalytic work directed at different public-key algorithms. By analyzing approximately 16,000 candidate papers, the study converts academic publications into estimated research-allocation years. The findings indicate that lattice-based cryptanalysis has recently overtaken elliptic curve cryptanalysis in cumulative effort.
Methodology and limitations
- The study classifies work on ECDLP, structured and plain lattices, and syndrome decoding.
- Estimates are derived from a person-level author map applied to roughly 16,000 papers.
- The analysis was conducted using Claude Fable 5.1, Claude Opus 5.5, and GPT-6 Astra.
- The metric may overstate actual time spent as it relies solely on published literature.
- It excludes unpublished academic research and secret intelligence agency cryptanalysis.
Why it matters
This provides a new metric for assessing the maturity and scrutiny of cryptographic primitives used in modern security protocols.
Original reference: www.schneier.com →