Ilya Mironov Anton Mityagin Kobbi Nissim Hard Instances of the Constrained Discrete Logarithm Problem. 582-598 2006 conf/ants/2006 ANTS http://dx.doi.org/10.1007/11792086_41 db/conf/ants/ants2006.html#MironovMN06