44     int hLen, maskedDBLen, MSBits, emLen;  in RSA_verify_PKCS1_PSS_mgf1()  local
56     hLen = EVP_MD_get_size(Hash);  in RSA_verify_PKCS1_PSS_mgf1()
57     if (hLen < 0)  in RSA_verify_PKCS1_PSS_mgf1()
67         sLen = hLen;  in RSA_verify_PKCS1_PSS_mgf1()
83     if (emLen < hLen + 2) {  in RSA_verify_PKCS1_PSS_mgf1()
88         sLen = emLen - hLen - 2;  in RSA_verify_PKCS1_PSS_mgf1()
89     } else if (sLen > emLen - hLen - 2) { /* sLen can be small negative */  in RSA_verify_PKCS1_PSS_mgf1()
97     maskedDBLen = emLen - hLen - 1;  in RSA_verify_PKCS1_PSS_mgf1()
104     if (PKCS1_MGF1(DB, maskedDBLen, H, hLen, mgf1Hash) < 0)  in RSA_verify_PKCS1_PSS_mgf1()
123         || !EVP_DigestUpdate(ctx, mHash, hLen))  in RSA_verify_PKCS1_PSS_mgf1()
131     if (memcmp(H_, H, hLen)) {  in RSA_verify_PKCS1_PSS_mgf1()
160     int hLen, maskedDBLen, MSBits, emLen;  in RSA_padding_add_PKCS1_PSS_mgf1()  local
167     hLen = EVP_MD_get_size(Hash);  in RSA_padding_add_PKCS1_PSS_mgf1()
168     if (hLen < 0)  in RSA_padding_add_PKCS1_PSS_mgf1()
178         sLen = hLen;  in RSA_padding_add_PKCS1_PSS_mgf1()
192     if (emLen < hLen + 2) {  in RSA_padding_add_PKCS1_PSS_mgf1()
197         sLen = emLen - hLen - 2;  in RSA_padding_add_PKCS1_PSS_mgf1()
198     } else if (sLen > emLen - hLen - 2) {  in RSA_padding_add_PKCS1_PSS_mgf1()
211     maskedDBLen = emLen - hLen - 1;  in RSA_padding_add_PKCS1_PSS_mgf1()
218         || !EVP_DigestUpdate(ctx, mHash, hLen))  in RSA_padding_add_PKCS1_PSS_mgf1()
226     if (PKCS1_MGF1(EM, maskedDBLen, H, hLen, mgf1Hash))  in RSA_padding_add_PKCS1_PSS_mgf1()
235     p += emLen - sLen - hLen - 2;  in RSA_padding_add_PKCS1_PSS_mgf1()