The improbability that an elliptic curve has subexponential discrete log problem under the Menezes-Okamoto-Vanstone algorithm (1998)

by R Balasubramanian, Neal Koblitz
Venue:J. Cryptology