A Subexponential-Time Quantum Algorithm for the Dihedral Hidden Subgroup Problem