The discrete logarithm hides O(log n) bits (1988)

by D L Long, A Wigderson
Venue:SIAM J. Computing