Hi Marco, > We are talking around sqrt_exact... Hensel lifting should be able to lift a square root mod p to mod p^2. This is what we use for example in the last step of the GNFS algorithm for integer factorization. Paul