 formula_10 is cyclic and of order formula_7, while formula_12 is isomorphic to formula_13.For encryption, the message is transformed into the corresponding coset of the factor group formula_14 and the security of the scheme relies on the difficulty of distinguishing random elements in different cosets of formula_12.It is semantically secure if it is hard to decide if two given elements are in the same coset.