Correctness ZN-I modY <KM>N-I mod Y <XNM>N-I mod Y <XM> mody Therefore, greedy on ZN- mod Y is like greedy on <x, M> and hence we can find m 1212 Correctness Z N-1 mod Y = <K,M> N-1 mod Y = < XN,M>N-1 mod Y = < X,M> mod Y = <X,M> Therefore, greedy on Z N-1 mod Y is like greedy on <X,M> and hence we can find M