but not necessarily terrible. I have personally seen the difference between n*lg(n) and n^2, it is… substantial. If factoring can be done in, say n^3 time, it would be less secure than 2^n, but perhaps it could still be “safe enough.” It likely still wouldn’t break ...