“Dlog is Practically as Hard (or Easy) as DH – Solving Dlogs via DH Oracles on EC Standards” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(4), pp. 146–166. doi:10.46586/tches.v2023.i4.146-166.