link to Colin Percival re: recommended RSA signature padding