Coppersmith's method