Speedup for root computation

works fine for security parameter k = 256