On the Efficiency of Pollard's Rho Method for Discrete Logarithms