security: modulus length now given in bits