 Thus taking formula_22 will lead to a nontrivial factorization of "n".Now, we assume an efficient algorithm exists to find at least one square root.Then we pick a random "r" modulo "n" and square it formula_23, then, using the algorithm we take one square root of "R" modulo "n", we will get a new square root formula_24, and with probability half formula_25.