Johan Håstad Mats Näslund The security of all RSA and discrete log bits. 187-230 2004 51 J. ACM 2 http://doi.acm.org/10.1145/972639.972642 db/journals/jacm/jacm51.html#HastadN04