3 ms·
I agree. The randomized RSA modes (OAEP and PSS) are preferable to the old constant ones (PKCS #1 v1.5). They are better from a theoretical perspective and also
by NateLawson 17y ago
I agree. The randomized RSA modes (OAEP and PSS) are preferable to the old constant ones (PKCS #1 v1.5). They are better from a theoretical perspective and also from the fact that the randomization may protect you against an attack even in the face of some (but not all!) implementation flaws. They offer both better theoretical security and defense-in-depth.