Hi,
Given that essentially all production ECC systems are 256-bit, and that 256-bit is really 128-bit strong in the context of our best attacks Pollards/BSGS.
Do we consider 128-bit enough for the medium term (5-10years).
It's starting to feel too small.