Here is a blog where Scott Aaronson wrote about this, including a link to the NSA document. That link is however now broken, but the blog contains all of the needed text.

ps : Link to the full report : https://documents.epfl.ch/users/l/le/lenstra/public/papers/cryptolog_126.pdf

Here is a blog where Scott Aaronson wrote about this, including a link to the NSA document. That link is however now broken, but the blog contains all of the needed text. An alternative copy of the document is provided here or on the internet archive.

Here is a blog where Scott Aaronson wrote about this, including a link to the NSA document. That link is however now broken, but the blog contains all of the needed text.

Here is a blog where Scott Aaronson wrote about this, including a link to the NSA document. That link is however now broken, but the blog contains all of the needed text.

ps : Link to the full report : https://documents.epfl.ch/users/l/le/lenstra/public/papers/cryptolog_126.pdf