RSAES-PKCS1-v1_5 algorithm is a key transform algorithm and the size of the data (i.e. the key) is required to be less than RSA key modulus: http://www.w3.org/TR/xmlenc-core/#sec-Alg-KeyTransport Aleksey