From the shortest vector problem to the dihedral hidden subgroup problem
Polynomial-Time Algorithms for Prime Factorization and Discrete Logarithms on a Quantum Computer