Pairings used cryptography allow the output to be R-module too. I will amend the article, unless there are objections. DRLB (talk) 23:27, 23 January 2008 (UTC)