Breaking RSA may not be equivalent to factoring (1998)

by D Boneh, R Venkatesan
Venue:Proceedings of Eurocrypt '98, Lecture Notes in Computer Science