On Cryptographic Schemes Based on Discrete Logarithms and Factoring