The Return of Coppersmith's Attack: Practical Factorization of Widely Used RSA Moduli