elliptic-curve discrete logarithm problem