Michael Backes Markus Dürmuth Dominique Unruh OAEP Is Secure under Key-Dependent Messages. 506-523 2008 ASIACRYPT http://dx.doi.org/10.1007/978-3-540-89255-7_31 conf/asiacrypt/2008 db/conf/asiacrypt/asiacrypt2008.html#BackesDU08