table of 1Q to 16Q. Add, double 5 times. Attack one limb at a time, instead of one bit. 34 limb values → 17 points / 5 key bits on average. 01 00010 01110 01010 01010 10010 00001 01111 10011 01101 ...
Each limb: ~16 points on average • Each point: ~226 candidate points • (226 * 16) candidate points: ~85 CPU hours • 85 CPU hours: $1.26 EC2 spot instances • Total: 4,400 CPU hours / $65 on EC2