On: Primer on elliptic curve cryptography

[mritun]

That's correct.

RSA (like everything else) is a deterministic encryption. That is why we must do one of the two:

1. Use a random padding 2. or always encrypt a random number.

the former is PKCS#5, the latter is what https does.