Are RSA or ECC vulnerable to an attack where the same (unknown) plaintext is encrypted with multiple public keys?
RSA is vulnerable to this attack if an insecure padding scheme is used. Still unsure about elliptic curve cryptography.