Rating:
TL;DR: Generate MD5 collisions with fastcoll, then solve x^2 + ky^2 = m (mod n)
I don't remember