This sounds about right. Antoine Joux&#x27;s astonishing progress on solving the DLP in small&#x2F;medium characteristic fields along with a slew of Fault, Side-channel, Acoustic attacks have rendered anyone using RSA very vulnerable. Elliptic Curves have such a high cognitive overhead such that there are probably less than 50 people in the world capable of discovering a novel ECDLP attack but now that attention is being drawn towards ECC there could be a new attack found any day. I suspect this whole Post-Quantum crypto focus is an attempt to keep eyes off of the the ECDLP