RSA-OAEP is secure under the RSA assumption
scientific article; zbMATH DE number 2103802