Breaking RSA may not be equivalent to factoring (0)

by D BONEH, R VENKATESAN
Venue:EUROCRYPT ’98, Lecture