Re: RSA padding questions

"vedaal" <vedaal@xxxxxxxxx> wrote in message
news:1159191646.865178.150580@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
assume a plaintext of 'm1', encrypted using RSA and standard OAEP
padding, to produce a ciphertext 'c'


is it possible to construct a different padding system, so that a
different plaintext 'm2',
encrypted with the same RSA key, but with the new padding,
still produces the same ciphertext 'c' ?

It's always possible to do that, just don't know why you'd really want to,
it would be extremely insecure. You're talking about steganography, the
problem is that with stego there is a basic assumption that they don't know
there is a (second) message, here they know.
Joe


.

Relevant Pages

  • Re: RSA padding questions
    ... padding, ... still produces the same ciphertext 'c'? ... problem is that with stego there is a basic assumption that they don't know ... m1 is meaningful plaintext ...
    (sci.crypt)
  • Re: Removing extra padding.
    ... While Encrypting a file the original data gets padded as per the ... I remove this extra padding in the output, ... the length of the plaintext and then pad, ... then starting from the first byte count left through the ciphertext until ...
    (sci.crypt)
  • Re: AES encryption with Java
    ... There is at least one padding byte. ... I'm pretty sure that if you encrypt plaintext that is 16 ... bytes long you should receive ciphertext that is 16 bytes long. ... I'm encrypting 16 byte plaintext and ending up with 32 byte ...
    (comp.lang.java.security)
  • Re: Encryption using System.Security.Cryptography
    ... Since the first plaintext block doesn't have a preceeding encrypted block, ... Where ct1...3 are the resulting ciphertext blocks. ... >Subject: Re: Encryption using System.Security.Cryptography ... >the Padding property of the Rijndael class). ...
    (microsoft.public.dotnet.security)
  • RSA // linking plaintext to ciphertext
    ... >> the plaintext), ... >> ciphertext, ... which is not not the same as the known ciphertext when padding is ... even if encrypt, then sign or sign&encrypt, is used, ...
    (sci.crypt)