CWE-780 (未配合OAEP使用RSA算法) — Vulnerability Class 3

CWE-780 represents a cryptographic weakness where developers implement the RSA algorithm without utilizing Optimal Asymmetric Encryption Padding (OAEP). This omission leaves the encryption vulnerable because raw RSA is deterministic, meaning identical plaintexts always produce identical ciphertexts. Attackers typically exploit this by leveraging the lack of randomness to perform chosen-plaintext attacks or to identify patterns in encrypted data, effectively nullifying the security provided by the key length. Without OAEP, the plaintext remains predictable, allowing adversaries to compromise confidentiality through statistical analysis or known-plaintext techniques. To avoid this vulnerability, developers must explicitly configure their cryptographic libraries to enforce OAEP padding. This ensures that the encryption process introduces sufficient randomness, making the ciphertext unpredictable and resistant to pattern-based attacks, thereby maintaining the intended security posture of the RSA implementation.