Stateful public-key cryptosystems: how to encrypt with one 160-bit exponentiation