Interactive Proofs and Zero-Knowledge
y ’àà QRn
Pick rand bit b
Check a2 mod n = w•yb mod n