Question

I’m trying to test my RSA implementation’s correctness with the RSACryptoPAD example in here: http://www.codeproject.com/Articles/10877/Public-Key-RSA-Encryption-in-C-NET

But it always creates different encryption results. Isn’t RSA just a mod and power operation? But the program can decrypt all different encrypted texts correctly. My results are same with the http://nmichaels.org/rsa.py site. I think RSACryptoPAD is doing some other things?

Answer 1

The code uses RSACryptoServiceProvider. The line

  byte[] encryptedBytes = rsaCryptoServiceProvider.Encrypt( tempBytes, true );

Tells it to encrypt using OAEP padding, which introduces randomness into the padding. The reason for doing this is so that encrypting the same plaintext will always yield different results (as you are seeing). This is a good thing, as it stops an information leak where an attacker sees you sent the same message multiple times.

There’s a great historical example of why this is important. “AF is short of water“