On an elliptic curve, you know the generator point P and the point Q = k·P. Why is it very difficult to recover the scalar k?
P
Q = k·P
k