The attacks we're talking about aren't chosen plaintext; they're CCA2. And, in f...

tptacek on Feb 13, 2018 | parent | context | favorite | on: Breaking Textbook RSA Used to Protect the Privacy ...

The attacks we're talking about aren't chosen plaintext; they're CCA2. And, in fact, RSA retains CCA2 vulnerability in its most common "padding" mode.