Daniel Berger: Smooth Twins for Cryptographic Applications from Pell Equations. INDOCRYPT 2025: 173-193