<story><title>Implementing RSA in Python from Scratch</title><url>https://coderoasis.com/implementing-rsa-from-scratch-in-python/</url></story><parent_chain></parent_chain><comment><author>tptacek</author><text>Part 2 of this article seems to explain that to encrypt arbitrary plaintexts, those larger than 256 bytes, you should chunk your messages up, pad the last block, and encrypt with RSA-ECB.&lt;p&gt;&lt;i&gt;With the code presented here and in the last article, you can make a working RSA encryption &amp;amp; decryption application. However, it still lacks protection from side-channel attacks.&lt;/i&gt;&lt;p&gt;These articles are describing something now known as &amp;quot;textbook&amp;quot; or &amp;quot;schoolbook&amp;quot; RSA, which is worth looking up.</text></comment>
<story><title>Implementing RSA in Python from Scratch</title><url>https://coderoasis.com/implementing-rsa-from-scratch-in-python/</url></story><parent_chain></parent_chain><comment><author>dagenix</author><text>Missing from the article is a warning about how hard it actually is to make RSA secure. There are a _ton_ of footguns that are easy to miss which can result in a totally broken implementation. So, nifty article and all - but there really should be a disclaimer that an actual implementation is an order of magnitude more complex once you take into account all of those gotchas.</text></comment>