L=3072, N=256 provides 128 bits of security not 112.