A variant of Wiener's attack on RSA