S5C8: implement an E=3 RSA Broadcast attack.