The Schmidt-Samoa cryptosystem is an asymmetric cryptographic technique, whose security, like Rabin depends on the difficulty of integer factorization. Unlike Rabin this algorithm does not produce an ambiguity in the decryption at a cost of encryption speed.

Now N is the public key and d is the private key.

To encrypt a message m we compute the ciphertext as ${\displaystyle c=m^{N}\mod N.}$

To decrypt a ciphertext c we compute the plaintext as ${\displaystyle m=c^{d}\mod pq,}$ which like for Rabin and RSA can be computed with the Chinese remainder theorem.

Example:

Now to verify:

The algorithm, like Rabin, is based on the difficulty of factoring the modulus N, which is a distinct advantage over RSA. That is, it can be shown that if there exists an algorithm that can decrypt arbitrary messages, then this algorithm can be used to factor N.

The algorithm processes decryption as fast as Rabin and RSA, however it has much slower encryption since the sender must compute a full exponentiation.