My claim is: FS does not imply, by definition, that every attack scales linearly in the amount of keys. Having a counter-example of an attack that does scale li

My claim is: FS does not imply, by definition, that every attack scales linearly in the amount of keys. Having a counter-example of an attack that does scale linearly does not disprove that point. I indeed only cover DH at #2, as index-calculus does not apply to ECDH.