Interactive Proofs and Zero-Knowledge
y QRn
Check a2 mod n = w•yb mod n