How to Backdoor Diffie-Hellman.
Surreptitiously Weakening Cryptographic Systems.