3 ms·
Quantitatively, yes(2^224 security target vs 2^128 security target respectively wrt. discrete log calculation). Qualitatively, 2^128 is already computationally
by d-z-m 3y ago
Quantitatively, yes(2^224 security target vs 2^128 security target respectively wrt. discrete log calculation).
Qualitatively, 2^128 is already computationally infeasible(barring some advance in quantum computing), so the meaningful difference in security is debatable, assuming no weaknesses in the underlying curve.