iirc, shor's algorithm for factoring relies on this.