This is a toy implementation in Go of Manger's chosen-ciphertext attack on RSA-OAEP - View it on GitHub