. . "A then computes TA=gS A mod p, where p is a large prime number and g is number less than p with certain restrictions that are not important for a basic understanding of the method (step 206)." . .