rsa: masking optional
fix cheesy clipping of rsa results

... when key size is not a multiple of 8
rsa selfies
dh selfies