| PASS | setup | |
| PASS | RSA-OAEP with SHA-1 and no label decryption | |
| PASS | RSA-OAEP with SHA-256 and no label decryption | |
| PASS | RSA-OAEP with SHA-384 and no label decryption | |
| PASS | RSA-OAEP with SHA-512 and no label decryption | |
| PASS | RSA-OAEP with SHA-1 and empty label decryption | |
| PASS | RSA-OAEP with SHA-256 and empty label decryption | |
| PASS | RSA-OAEP with SHA-384 and empty label decryption | |
| PASS | RSA-OAEP with SHA-512 and empty label decryption | |
| PASS | RSA-OAEP with SHA-1 and a label decryption | |
| PASS | RSA-OAEP with SHA-256 and a label decryption | |
| PASS | RSA-OAEP with SHA-384 and a label decryption | |
| PASS | RSA-OAEP with SHA-512 and a label decryption | |
| PASS | RSA-OAEP with SHA-1 and no label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and no label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and no label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and no label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and empty label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and empty label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and empty label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and empty label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and a label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and a label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and a label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and a label decryption with altered ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and no label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and no label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and no label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and no label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and empty label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and empty label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and empty label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and empty label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and a label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and a label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and a label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and a label decryption with altered ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and no label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and no label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and no label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and no label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and empty label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and empty label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and empty label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and empty label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and a label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-256 and a label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-384 and a label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-512 and a label decryption with transferred ciphertext during call | |
| PASS | RSA-OAEP with SHA-1 and no label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and no label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and no label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and no label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and empty label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and empty label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and empty label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and empty label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and a label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-256 and a label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-384 and a label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-512 and a label decryption with transferred ciphertext after call | |
| PASS | RSA-OAEP with SHA-1 and no label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-256 and no label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-384 and no label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-512 and no label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-1 and empty label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-256 and empty label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-384 and empty label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-512 and empty label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-1 and a label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-256 and a label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-384 and a label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-512 and a label using publicKey to decrypt | |
| PASS | RSA-OAEP with SHA-1 and no label no decrypt usage | |
| PASS | RSA-OAEP with SHA-256 and no label no decrypt usage | |
| PASS | RSA-OAEP with SHA-384 and no label no decrypt usage | |
| PASS | RSA-OAEP with SHA-512 and no label no decrypt usage | |
| PASS | RSA-OAEP with SHA-1 and empty label no decrypt usage | |
| PASS | RSA-OAEP with SHA-256 and empty label no decrypt usage | |
| PASS | RSA-OAEP with SHA-384 and empty label no decrypt usage | |
| PASS | RSA-OAEP with SHA-512 and empty label no decrypt usage | |
| PASS | RSA-OAEP with SHA-1 and a label no decrypt usage | |
| PASS | RSA-OAEP with SHA-256 and a label no decrypt usage | |
| PASS | RSA-OAEP with SHA-384 and a label no decrypt usage | |
| PASS | RSA-OAEP with SHA-512 and a label no decrypt usage | |
| PASS | RSA-OAEP with SHA-1 and no label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and no label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and no label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and no label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and empty label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and empty label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and empty label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and empty label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and a label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and a label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and a label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and a label with altered plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and no label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and no label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and no label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and no label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and empty label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and empty label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and empty label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and empty label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and a label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and a label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and a label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and a label with altered plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and no label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and no label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and no label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and no label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and empty label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and empty label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and empty label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and empty label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and a label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-256 and a label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-384 and a label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-512 and a label with transferred plaintext during call | |
| PASS | RSA-OAEP with SHA-1 and no label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and no label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and no label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and no label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and empty label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and empty label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and empty label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and empty label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and a label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-256 and a label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-384 and a label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-512 and a label with transferred plaintext after call | |
| PASS | RSA-OAEP with SHA-1 and no label | |
| PASS | RSA-OAEP with SHA-256 and no label | |
| PASS | RSA-OAEP with SHA-384 and no label | |
| PASS | RSA-OAEP with SHA-512 and no label | |
| PASS | RSA-OAEP with SHA-1 and empty label | |
| PASS | RSA-OAEP with SHA-256 and empty label | |
| PASS | RSA-OAEP with SHA-384 and empty label | |
| PASS | RSA-OAEP with SHA-512 and empty label | |
| PASS | RSA-OAEP with SHA-1 and a label | |
| PASS | RSA-OAEP with SHA-256 and a label | |
| PASS | RSA-OAEP with SHA-384 and a label | |
| PASS | RSA-OAEP with SHA-512 and a label | |
| PASS | RSA-OAEP with SHA-1 and no label too long plaintext | |
| PASS | RSA-OAEP with SHA-256 and no label too long plaintext | |
| PASS | RSA-OAEP with SHA-384 and no label too long plaintext | |
| PASS | RSA-OAEP with SHA-512 and no label too long plaintext | |
| PASS | RSA-OAEP with SHA-1 and empty label too long plaintext | |
| PASS | RSA-OAEP with SHA-256 and empty label too long plaintext | |
| PASS | RSA-OAEP with SHA-384 and empty label too long plaintext | |
| PASS | RSA-OAEP with SHA-512 and empty label too long plaintext | |
| PASS | RSA-OAEP with SHA-1 and a label too long plaintext | |
| PASS | RSA-OAEP with SHA-256 and a label too long plaintext | |
| PASS | RSA-OAEP with SHA-384 and a label too long plaintext | |
| PASS | RSA-OAEP with SHA-512 and a label too long plaintext | |
| PASS | RSA-OAEP with SHA-1 and no label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-256 and no label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-384 and no label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-512 and no label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-1 and empty label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-256 and empty label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-384 and empty label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-512 and empty label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-1 and a label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-256 and a label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-384 and a label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-512 and a label using privateKey to encrypt | |
| PASS | RSA-OAEP with SHA-1 and no label no encrypt usage | |
| PASS | RSA-OAEP with SHA-256 and no label no encrypt usage | |
| PASS | RSA-OAEP with SHA-384 and no label no encrypt usage | |
| PASS | RSA-OAEP with SHA-512 and no label no encrypt usage | |
| PASS | RSA-OAEP with SHA-1 and empty label no encrypt usage | |
| PASS | RSA-OAEP with SHA-256 and empty label no encrypt usage | |
| PASS | RSA-OAEP with SHA-384 and empty label no encrypt usage | |
| PASS | RSA-OAEP with SHA-512 and empty label no encrypt usage | |
| PASS | RSA-OAEP with SHA-1 and a label no encrypt usage | |
| PASS | RSA-OAEP with SHA-256 and a label no encrypt usage | |
| PASS | RSA-OAEP with SHA-384 and a label no encrypt usage | |
| PASS | RSA-OAEP with SHA-512 and a label no encrypt usage | |