Ok, so if we find u, we can solve (x+n). How does n0 work into this? For smaller examples we can iterate by 1. Then, once f is big enough to divide (f-2)/8 we can iterate by n0. Then when we’re dealing with RSA sized numbers we do (f-2)/40 and iterate by n0. What are the problems you’re currently having with the iteration process for larger numbers? It seems like we have a good working process for smaller numbers. The key is tying the verification calc to the formula ((n0 * n0 - 1) + 2d(n0 - 1) + 2d +1 - e).
I think this is what VQC was getting at. n0^2 and 2d(n-1) combine to form the (x+n) square. I could be stating the obvious, but this is news to me.
>((n0 * n0 - 1) + 2d(n0 - 1) + 2d +1 - e)