Discrete-Logarithm Problem