A Chosen Ciphertext Attack on RSA Optimal Asymmetric Encryption Padding (OAEP) as Standardized in PKCS #1 v2.0. - James Manger (CRYPTO, 2001)

Additional Methods for Generating Key Identifiers Values. - Sean Turner; Stephen T. Kent; James Manger (RFC, 2013)