ot: mod p^2 for ciphertext