The discrete logarithm modulo a composite hides O(n) bits (1993)

by J H̊astad, A W Schrift, A Shamir
Venue:Journal of Computer and System Sciences