There's the following note re modular exponentiation, which is pretty easy to scale for shorter exponents. And there's a 1995 Crypto paper about 155-bit EC. Hilarie