Does any problem arise when the order of an elliptic curve is equal to its prime field modulus?
Found an answer: Why Smart&#39;s attack doesn&#39;t work on this ECDLP?

Smart's attack seems to be what I was looking for.