Analysis of Bernstein's Factorization Circuit. - Arjen K. Lenstra; Adi Shamir; Jim Tomlinson; Eran Tromer (ASIACRYPT, 2002)