Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: > Abstract: We estimate how much public cryptanalysis each public-key assumption > has received, using the literature itself as the instrument. From roughly > sixteen thousand candidate papers we classify cryptanalytic work on ECDLP, > structured and plain lattices, syndrome decoding and their comparators, then > convert papers into estimated research-allocation years through a person-level > author map. These publication-based estimates may substantially overstate > actual time spent. Lattices have overtaken elliptic curves in this cumulative > measure only recently; we express that history as inference budgets under > stated productivity assumptions. The study was conducted by AI models: Claude > Fable 5.1 and Claude Opus 5.5 built the pipeline, ran the analysis and wrote > this page, with contributions from GPT-6 Astra. Matthew Green set the > questions, made the key methodological decisions and oversaw the work...