> the belief that encryption is just P^^message%N. Which it is not - you must include padding, and doing that padding wrong also breaks the security. Actually,

> the belief that encryption is just P^^message%N. Which it is not - you must include padding, and doing that padding wrong also breaks the security. Actually, even that is wrong; you can't[0] securely pad a message; you have to use P^(K:=rand(N)), then use K (or preferably H(K)) as a symmetric encryption key to encrypt the actual message. 0: outside of a handful of special cases, of which `rand(N)` is the only example I'm reasonably confident in