Pohlig-Hellman system