Solution

ID: past-exam-of-the-computer-science-course-of-the-university-of-oxford/2015/computer-security/1/b/ii/solution

The essential exponent condition is
Otherwise the modular multiplicative inverse defining does not exist. For large prime numbers greater than three, this is equivalent to
If, for example, , the multiplicative group modulo has order divisible by three, and cubing is not a bijection; distinct plaintexts can have the same ciphertext. Unique decryption of all messages would then be impossible.
The prime numbers must also be distinct for the displayed totient formula, and selected sufficiently large and independently that integer factorization of is infeasible. A small factor, equal factors, or an exceptionally small difference between and gives an avoidable factorisation weakness. These size and generation conditions address security; the congruence condition addresses invertibility of cubing.

New to topics? Read the docs here!