Finding a small root of a bivariate integer equation; factoring with high bits known (1996)

by D Coppersmith
Venue:In EUROCRYPT