Hi, I have some questions about Q7b.

m = 2**62-1

- Shouldnt we define Z = IntegerModRing(m) and sample with Z.random_element() rather than using randint? Since m is not prime, with randint we can get numbers which are not in Zm* (that is gcd(g, m) != 1)

- In the question explanation, we are talking about the factorization of k, which is the cardinality of the group G. But in the question we are talking about Zm*, which has cardinality phi(m) and get the factor of m. Did I not understand something correctly?