Small solutions to polynomial equations, and low exponent rsa vulnerabilities (1997)

by Don Coppersmith
Venue:J. Cryptology