So, a machine costing a few hundred million dollars, running for a year, can break about one DH key per year. Too bad many implementations use the _exact same ones_ !crypto !security

https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/