I agree, this was 3x faster than expected. Note: Factoring RSA-240 only took 900 core-years the additional 3100 core-years were on the discrete log. RSA 240 i

I agree, this was 3x faster than expected. Note: Factoring RSA-240 only took 900 core-years the additional 3100 core-years were on the discrete log. RSA 240 is 8 digits longer, it takes ~2x as much work for each 5.5 additional digits so this should have taken 2.7x as much compute.