Note that the Qi's are computed without reference to Q, and p???1 mod M is a precomputed value as described above. [0058] In Steps 26-30, Q is then converted from the RNS basis (m1, m2, . . . mt) to RNS basis (Mt+1, Mt+2, . . . m2t) by computing the MRS expansion Q=Q#1+Q#2m1+Q#3m1m2 + . . . +Q#tm1m2 . . . mt???1.