Comment Comment by 1aqp Sorry, I wrote that comment too quickly. It is close to impossible to recover ka, kb and ka.kb.P, even given A=ka.P, B=kb.P and P. parent 1aqp 3 years ago