Small solutions to polynomial equations, and low exponent RSA vulnerabilities (1997)

by D Coppersmith
Venue:J. of Cryptology