Large data not encrypted with RSA Encryption

Question

My Problem:

My encryption code working fine for below 64 characters. but if it exceeds 64 character I got following error

javax.crypto.IllegalBlockSizeException: input must be under 64 bytes

Encryption code

        cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding);
        cipher.init(Cipher.ENCRYPT_MODE, publicKey);
        encryptedBytes = cipher.doFinal(message.getBytes(StandardCharsets.UTF_8));
        rsaEncrypted= Base64.encodeToString(encryptedBytes, Base64.NO_WRAP);

Key generation code

      KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
      keyGen.initialize(512);
      KeyPair keypair = keyGen.genKeyPair();
      PublicKey pub = keypair.getPublic();
      byte[] pubs = pub.getEncoded();

My question:

It's possible encrypt large text with 512 bits of keys? Any mistake in my code?

Note: If anyone want full of code I will update later.

the size of the data to be encrypted is limited by the size of the RSA key. Use a larger key or use symmetric encryption — pedrofb, Aug 09 '18 at 08:15
https://stackoverflow.com/questions/10007147/getting-a-illegalblocksizeexception-data-must-not-be-longer-than-256-bytes-when — Ashvin solanki, Aug 13 '18 at 05:25
@JamesKPolk In our iOS project team completed large text with 512 bit keys. That's the reason for bounty. I want to know any other possibilities with 512 bit keys. — Ranjithkumar, Aug 13 '18 at 12:48
[512 bit RSA keys are way too short for encryption.](https://en.wikipedia.org/wiki/RSA_numbers#RSA-155) — Ebbe M. Pedersen, Aug 14 '18 at 07:46
As an aside, you should avoid using ECB padding. https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation explains well why with the images of the linux penguin. — Elli White, Aug 18 '18 at 05:27
Please consider this solution https://stackoverflow.com/a/71268250/1711555 — Nandhan Thiravia, Feb 25 '22 at 15:43

score 14 · Answer 1 · answered Aug 09 '18 at 12:46

The number of bytes you can encrypt in one RSA block is dictated by the key size used minus any bytes taken up for padding.

Generally RSA is not suited for bulk encryption as it's quite slow. Instead use a symmetric encryption algorithm like AES if you can. If you really need the two key's of RSA, use a Hybrid approach where you encrypt the data with a random symmetric key, and then encrypt that key with the RSA key.

A benefit of using symmetric encryption is also that the libraries automatically supports bulk encryption - which they don't for RSA.

score 12 · Accepted Answer · answered Aug 14 '18 at 05:22

Here is a direct quote from the seminal book titled Cryptography Engineering by Ferguson, Schneier, and Kohno,

Encrypting a message is the canonical application of RSA, yet it is almost never used in practice. The reason is simple: the size of the message that can be encrypted using RSA is limited by the size of n. In real systems, you cannot even use all the bits, because the encoding function has an overhead. This limited message size is too impractical for most applications, and because the RSA operation is quite expensive in computational terms, you don’t want to split a message into smaller blocks and encrypt each of them with a separate RSA operation.

In other words, for a n-bit RSA key, the maximum length of data RSA can encrypt in bytes is

Floor(n/8) - 11

where 11 bytes is for padding

So for a key size of 512 bits, the maximum length of data that can be encrypted is,

512/8 - 11 = 53 bytes

Again from the book Cryptography Engineering,

The solution used almost everywhere is to choose a random secret key K, and encrypt K with the RSA keys. The actual message m is then encrypted with key K using a block cipher or stream cipher. So instead of sending something like E_RSA(m), you send E_RSA(K),E_K(m).

Basically, it's telling you do the following to get over the limitation of RSA,

Generate a secret key, K using an algorithm such as AES.
Encrypt the plaintext, m, with the newly generated secret key to get cipher text, say E_K(m).
Encrypt the secret key a RSA public key, E_RSA(K).
Sent the client the cipher text, E_K(m), and the encrypted key E_RSA(K).
The client can decrypt E_RSA(K) with the RSA private key to get K.
The client then decrypt the cipher text, E_K(m) with K to get m.

Please consider this solution https://stackoverflow.com/a/71268250/1711555. This doesn't require Hybrid Encryption — Nandhan Thiravia, Feb 25 '22 at 15:44

Large data not encrypted with RSA Encryption

2 Answers2

Linked