²In the remainder of this discussion, messages and ciphertexts will refer to integers in the range 0 to n - 1, not to bit strings.