On the Security Properties of OAEP as an All-or-Nothing Transform.

Victor Boyko

Browse the full CRYPTO paper archive.