Pollard%27s kangaroo algorithm