`PKCS1v15` seems to be a popular choice (golang, crypto++), but I don't feel strongly either.