- * should be coprime. It is safe to use the least significant %$\log \log
- * n$% bits of each step in the sequence -- an adversary must factor the
- * modulus before being able to work forwards or backwards. The output of
- * the generator cannot be distinguished from a (uniform, independent) random
- * sequence of bits using any polynomial-time test. This is by far the
- * strongest pseudorandom number generator provided in Catacomb, and by far
- * the slowest too. For normal use, the standard Catacomb @rand@ generator
- * should be more than adequate.
+ * should be coprime. It is safe to use the least significant
+ * %$\log \log n$% bits of each step in the sequence -- an adversary must
+ * factor the modulus before being able to work forwards or backwards. The
+ * output of the generator cannot be distinguished from a (uniform,
+ * independent) random sequence of bits using any polynomial-time test. This
+ * is by far the strongest pseudorandom number generator provided in
+ * Catacomb, and by far the slowest too. For normal use, the standard
+ * Catacomb @rand@ generator should be more than adequate.