Lattice attacks on digital signature schemes
Small Solutions to Polynomial Equations, and Low Exponent RSA Vulnerabilities