Pollard's p − 1 algorithm