Rabin cryptosystem

Rabin encryption sends $m$ to $m^2$ modulo a product of two secret primes. Decryption computes the four square roots by the Chinese remainder theorem.