the need for timing constraints -- The solution of McCurley's discrete log challenge --