Pollard rho method