Like many public key cryptosystems, this scheme works in the group (\mathbb{Z}/n\mathbb{Z})^* where n is a product of two large primes.
Naccache-Stern cryptosystem | Cramer–Shoup cryptosystem |