((x, n), z)
Let QR={(x,n) = x=z2 mod n}
Aliceís public Key: (x,n)
Bob simply runs the
ExtractorAlice algorithm
Set z=R/Rz