Johan Håstad A. W. Schrift Adi Shamir The Discrete Logarithm Modulo a Composite Hides O(n) Bits. 376-404 1993 47 J. Comput. Syst. Sci. 3 db/journals/jcss/jcss47.html#HastadSS93