As mentioned in this chapter, $$textbook$$ RSA is subject to a forward search attack. An easy way to prevent this attack is to pad the plaintext with random bits before encrypting. This problem shows that there is another potential issue with RSA that is also prevented by padding the plaintext. Suppose that Alice$$s RSA public key is $($N$,$ e$)$and herprivate key is d$.$ Bob encrypts the message M $($without padding$)$ using Alice$$s public key to obtain the ciphertext C $=$ Me $($mod N$).$ Bob sends C to Alice and, as usual, Trudy intercepts C