A (randomized, probably heuristic) algorithm has been announced to solve this problem in time close to 2^(0.311 n), at the ESC 2010 seminar.
For details, see: https://cryptolux.org/ESC/Antoine_Joux
A solution has been announced
A (randomized, probably heuristic) algorithm has been announced to solve this problem in time close to 2^(0.311 n), at the ESC 2010 seminar.
For details, see: https://cryptolux.org/ESC/Antoine_Joux