Pohlig%E2%80%93Hellman algorithm