Wen-Ching W. Li, Mats Näslund, Igor E. Shparlinski: Hidden Number Problem with the Trace and Bit Security of XTR and LUC. CRYPTO 2002: 433-448