Elliptic-curve discrete logarithm problem