Trapdoor one-way function