My understanding was that was an average complexity for the attack. It's possible that I misunderstood it, though -- I didn't read the paper in detail.