magic rsa

Almost identical to magic dlog, and I only solved that problem. The solution just works on this one too, for free, so it’s like two flags, one problem. So see that problem.

This problem is supposedly easier(?), but I’m not sure what the easier solution is. Maybe some clever trick I missed, but it just seemed even more of a hassle to do the discrete log under a composite modulus than a prime with smooth phi.