Ron Steinfeld Yuliang Zheng An Advantage of Low-Exponent RSA with Modulus Primes Sharing Least Significant Bits. 52-62 2001 conf/ctrsa/2001 CT-RSA http://link.springer.de/link/service/series/0558/bibs/2020/20200052.htm db/conf/ctrsa/ctrsa2001.html#SteinfeldZ01