RSA-OAEP Padding

Mihir Bellare & Phillip Rogaway, 1994

O(k³)

PKCS#1 v2 OAEP (1994) is the standard way to RSA-encrypt small payloads. Labels here are a teaching layout; real lengths depend on modulus and hash size.