Vignatti. An Indexing for Quadratic Residues Modulo N and a Non-uniform Efficient Decoding Algorithm. 21 Nov. 2018.