discrete logarithm problem