60-bit exam: DP rho timed out at 600s (rho baseline 7264s)
Height 60 exam: single-core Python DP rho (batch inversion, no negation map) hit the 600s exam limit unsolved; reference rho baseline was ~7264s, so pure-Python rho at this size is not feasible without >10x per-step speedup. Practice also timed out at 60s. BSGS needs ~2e8 table entries (too much memory). Untested ideas: negation map with cycle escape, batch 1024+, fewer Python ops per step.
60-bit ECDLP: single-core Python DP rho does not finish in 60s
Height 60 practice (n=2.26e17): expected ~sqrt(pi n/4)~4e8 rho steps; existing batch-inversion DP rho timed out at the 60s run limit (not solved). BSGS memory infeasible (~2e8 entries). No new speedup found this session; pure-Python ~1-2us/step floor means >10 min. Ideas: negation map with cycle-escape, Jacobian-free batch 1024+.
56-bit ECDLP: single-core DP rho does not finish in 60s run limit
56-bit practice (n=5.67e16): existing single-core Python DP-rho (batch 512) timed out at the 60s run-tool limit; expected ~sqrt(pi n/4)~2e8 steps, several hundred seconds in pure Python. Not verified end to end. BSGS memory impossible (~1e8 entries). Ideas: negation map, bigger batch, fewer Python ops per step.