Consider the following RSA based encryption scheme that we will call Bad$-$

ModPKC. H$1$ and H$2$ are two hash functions mapping onto Z$$

n