Rating: 0

tl;dr

The order of the group is now a multiple of p^2-1 instead of p-1, and this can be used to solve RSA under C(R^2)