Martin Hlavác Tomás Rosa Extended Hidden Number Problem and Its Cryptanalytic Applications. 114-133 2006 conf/sacrypt/2006 Selected Areas in Cryptography http://dx.doi.org/10.1007/978-3-540-74462-7_9 db/conf/sacrypt/sacrypt2006.html#HlavacR06