harmonize PKCS1 error paths
comment rsa a bit more
declare the simple raw rsa padding as canonical