On the Provable Security of an Efficient RSA-Based Pseudorandom Generator