Factoring RSA Modulus with Known Bits from Both p and q: A Lattice Method.

Yao Lu, Rui Zhang, Dongdai Lin

Browse the full NSS paper archive.