Revision history [back]

Sage is not magic. If no-one has implemented a procedure for computing orders of curves over such large binary fields, then it will revert to using a generaic procedure, and that will not work in reasonable time.

I think that the documentation does say something about this: apart from prime fields, where Sage uses a pretty good SEA implementation from PARI, the point-counting abilities are definitely not good enough for fields of cryptographic interest.

Feel free to contribute something better!