How to choose secret parameters for RSA-type cryptosystems over elliptic curves