Yeah, I meant that it's not exactly the same level. Certain implementations of RSA were using broken sources of entropy, but it's not the same as "Bob always uses his address as his password" which has no entropy.
OK, sure, but if you want something more to do with ciphertexts than with key generation, consider this: "textbook" RSA is not secure. The reason is that the "textbook" RSA algorithm is not randomized; that is also the reason why so much effort has gone into randomized padding schemes like this:
Comments
Yeah, I meant that it's not exactly the same level. Certain implementations of RSA were using broken sources of entropy, but it's not the same as "Bob always uses his address as his password" which has no entropy.
OK, sure, but if you want something more to do with ciphertexts than with key generation, consider this: "textbook" RSA is not secure. The reason is that the "textbook" RSA algorithm is not randomized; that is also the reason why so much effort has gone into randomized padding schemes like this:
https://en.wikipedia.org/wiki/OAEP