Suppose we have two encrypted messages with two different public key issued from the one server. There is a client who wants to send these to messages to the server.
In the middle there is an adversary, who eavesdrops all the communications, so he already got the two encryption keys and the two encrypted messages.
According to batch RSA, the adversary can recover the encrypted messages without the need to use the private key to decrypt the messages. Can anyone explain how can we prove that batch RSA is secure in such a scenario?