@alcinnz Strictly speaking, you only need the weaker property that you've quoted, which I believe can be satisfied without associativity or commutativity (while keeping our trapdoor function suitably injective – maybe equivalent to invertibility??). It's just, normally we're using a finite cyclic group, which automatically gives us these properties.