Cryptography, Rsa, Cybersecurity.
first recover the random value (r) from: r=Y⊕H(X) and then with r we recover the padded message: m00…0=X⊕G(r) We then strip off k1 zeros from the end of this message and recover M. PSS (Probabilistic Signature Scheme) Four years after the OEAP paper, Bellare and Rogaway produced their PSS paper