Finding a small root of a bivariate integer equation; factoring with high bits known (1996)

by D Coppersmith
Venue:Advances in Cryptology – Eurocrypt’96