For RSA, every block of plaintext needs to be exponentiated by the private key: p^e (mod n) For ElGamal, every block of plaintext is multiplied by the secret key s*m (mod n)
So I thought ElGamal would be faster than RSA for encryption. However most online articles say RSA is faster than ElGamal, why is that?