How to Backdoor Diffie-Hellman.
An improved algorithm for computing logarithms over GF(p) and its cryptographic significance (Corresp.)