correction

2^5*87 = 2784
2^3 * 87 = 696

README.md

@@ -83,7 +83,7 @@ Since at the end of the first outer loop `b` is set to `b = b*y^(e-i) (mod p)`,
 
 ### The exploit
 
-The numbers in the exploit are very simple: we take `r=17,s=41`, which give `p=r*s=697`. This means that the computed values of `e` and `q` will be `p-1 = 2^5 * 87`.
+The numbers in the exploit are very simple: we take `r=17,s=41`, which give `p=r*s=697`. This means that the computed values of `e` and `q` will be `p-1 = 2^3 * 87`.
 
 We then pick `a=696`, which means that `a == -1 (mod p)` and also `b == -1 (mod p)` when initialized. This will satisfy step 1 setting `e=1` for the following outer loop.