[yuhong]

I think it is 2^61 now, the paper that once showed the 2^52 attack has removed the claims.