1107     unsigned int hlen;  in mgf_mask()  local
1114     hlen = mbedtls_md_get_size( md_ctx->md_info );  in mgf_mask()
1121         use_len = hlen;  in mgf_mask()
1122         if( dlen < hlen )  in mgf_mask()
1164     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()  local
1181     hlen = mbedtls_md_get_size( md_info );  in mbedtls_rsa_rsaes_oaep_encrypt()
1184     if( ilen + 2 * hlen + 2 < ilen || olen < ilen + 2 * hlen + 2 )  in mbedtls_rsa_rsaes_oaep_encrypt()
1192     if( ( ret = f_rng( p_rng, p, hlen ) ) != 0 )  in mbedtls_rsa_rsaes_oaep_encrypt()
1195     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1200     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1201     p += olen - 2 * hlen - 2 - ilen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1211     if( ( ret = mgf_mask( output + hlen + 1, olen - hlen - 1, output + 1, hlen,  in mbedtls_rsa_rsaes_oaep_encrypt()
1216     if( ( ret = mgf_mask( output + 1, hlen, output + hlen + 1, olen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_encrypt()
1337     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_decrypt()  local
1362     hlen = mbedtls_md_get_size( md_info );  in mbedtls_rsa_rsaes_oaep_decrypt()
1365     if( 2 * hlen + 2 > ilen )  in mbedtls_rsa_rsaes_oaep_decrypt()
1387     if( ( ret = mgf_mask( buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_decrypt()
1390         ( ret = mgf_mask( buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen,  in mbedtls_rsa_rsaes_oaep_decrypt()
1411     p += hlen; /* Skip seed */  in mbedtls_rsa_rsaes_oaep_decrypt()
1414     for( i = 0; i < hlen; i++ )  in mbedtls_rsa_rsaes_oaep_decrypt()
1421     for( i = 0; i < ilen - 2 * hlen - 2; i++ )  in mbedtls_rsa_rsaes_oaep_decrypt()
1554     size_t slen, min_slen, hlen, offset = 0;  in rsa_rsassa_pss_sign()  local
1588     hlen = mbedtls_md_get_size( md_info );  in rsa_rsassa_pss_sign()
1599         min_slen = hlen - 2;  in rsa_rsassa_pss_sign()
1600         if( olen < hlen + min_slen + 2 )  in rsa_rsassa_pss_sign()
1602         else if( olen >= hlen + hlen + 2 )  in rsa_rsassa_pss_sign()
1603             slen = hlen;  in rsa_rsassa_pss_sign()
1605             slen = olen - hlen - 2;  in rsa_rsassa_pss_sign()
1607     else if ( (saltlen < 0) || (saltlen + hlen + 2 > olen) )  in rsa_rsassa_pss_sign()
1620     p += olen - hlen - slen - 2;  in rsa_rsassa_pss_sign()
1651     if( ( ret = mgf_mask( sig + offset, olen - hlen - 1 - offset, p, hlen,  in rsa_rsassa_pss_sign()
1658     p += hlen;  in rsa_rsassa_pss_sign()
1964     unsigned int hlen;  in mbedtls_rsa_rsassa_pss_verify_ext()  local
2006     hlen = mbedtls_md_get_size( md_info );  in mbedtls_rsa_rsassa_pss_verify_ext()
2025     if( siglen < hlen + 2 )  in mbedtls_rsa_rsassa_pss_verify_ext()
2027     hash_start = p + siglen - hlen - 1;  in mbedtls_rsa_rsassa_pss_verify_ext()
2033     ret = mgf_mask( p, siglen - hlen - 1, hash_start, hlen, &md_ctx );  in mbedtls_rsa_rsassa_pss_verify_ext()
2076     if( memcmp( hash_start, result, hlen ) != 0 )  in mbedtls_rsa_rsassa_pss_verify_ext()