Reconstructing rsa private keys from random key bits
Small Solutions to Polynomial Equations, and Low Exponent RSA Vulnerabilities