use plain OAEP encrypt/decrypt
remove unused locals
helper that loads rsa public or private key
tests for invalid signatures
handle decryption error
generate rsa key
test for decrypting with wrong key