Breaking `128-bit Secure' Supersingular Binary Curves (or how to solve discrete logarithms in $F_{2^{4 cdot 1223}}$ and $F_{2^{12 cdot 367}}$)

Presented at crypto 2014 by

Thorsten Kleinjung

Robert Granger

Jens Zumbragel