446 				       uint32_t *hlen, uint32_t *hash_algo)  in get_hash_algo_from_padding()  argument
454 		*hlen = SHA1_HASH_SIZE;  in get_hash_algo_from_padding()
460 		*hlen = SHA224_HASH_SIZE;  in get_hash_algo_from_padding()
466 		*hlen = SHA256_HASH_SIZE;  in get_hash_algo_from_padding()
472 		*hlen = SHA384_HASH_SIZE;  in get_hash_algo_from_padding()
478 		*hlen = SHA512_HASH_SIZE;  in get_hash_algo_from_padding()
483 		*hlen = 0;  in get_hash_algo_from_padding()
603 	uint32_t hlen;  in rsa_padding_add_oaep_type()  local
611 	res = get_hash_algo_from_padding(padding, &hlen, &hash_algo);  in rsa_padding_add_oaep_type()
616 	if (in_len + 2 * hlen + 2 < in_len || olen < in_len + 2 * hlen + 2) {  in rsa_padding_add_oaep_type()
626 	res = rk_get_random(p, hlen);  in rsa_padding_add_oaep_type()
630 	p += hlen;  in rsa_padding_add_oaep_type()
637 	p += hlen;  in rsa_padding_add_oaep_type()
638 	p += olen - 2 * hlen - 2 - in_len;  in rsa_padding_add_oaep_type()
643 	res = mgf_mask(out + hlen + 1, olen - hlen - 1, out + 1, hlen, hash_algo, hlen);  in rsa_padding_add_oaep_type()
648 	res = mgf_mask(out + 1, hlen, out + hlen + 1, olen - hlen - 1, hash_algo, hlen);  in rsa_padding_add_oaep_type()
670 	uint32_t hlen;  in rsa_padding_check_oaep_type()  local
674 	res = get_hash_algo_from_padding(padding, &hlen, &hash_algo);  in rsa_padding_check_oaep_type()
685 	if (2 * hlen + 2 > ilen) {  in rsa_padding_check_oaep_type()
698 	res = mgf_mask(buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1, hash_algo, hlen);  in rsa_padding_check_oaep_type()
703 	res = mgf_mask(buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen, hash_algo, hlen);  in rsa_padding_check_oaep_type()
715 	p += hlen; /* Skip seed */  in rsa_padding_check_oaep_type()
718 	for (i = 0; i < hlen; i++)  in rsa_padding_check_oaep_type()
726 	for (i = 0; i < ilen - 2 * hlen - 2; i++) {  in rsa_padding_check_oaep_type()
860 	uint32_t slen, hlen, min_slen, offset = 0;  in rsa_padding_add_pss_type()  local
867 	hlen = hash_len;  in rsa_padding_add_pss_type()
868 	slen = hlen;  in rsa_padding_add_pss_type()
877 	min_slen = hlen - 2;  in rsa_padding_add_pss_type()
878 	if (olen < hlen + min_slen + 2)  in rsa_padding_add_pss_type()
880 	else if (olen >= hlen + hlen + 2)  in rsa_padding_add_pss_type()
881 		slen = hlen;  in rsa_padding_add_pss_type()
883 		slen = olen - hlen - 2;  in rsa_padding_add_pss_type()
885 	if (olen < hlen * 2 + 2)  in rsa_padding_add_pss_type()
888 	ps_len = olen - hlen * 2 - 2;  in rsa_padding_add_pss_type()
890 	if (olen < ps_len + 1 + slen + hlen)  in rsa_padding_add_pss_type()
942 	res = mgf_mask(out + offset, olen - hlen - 1 - offset, p, hlen, hash_algo, hash_len);  in rsa_padding_add_pss_type()
949 	p += hlen;  in rsa_padding_add_pss_type()
969 	uint32_t hlen;  in rk_rsa_padding_check_pss_type()  local
994 	hlen = hash_len;  in rk_rsa_padding_check_pss_type()
995 	slen = siglen - hlen - 1; /* Currently length of salt + padding */  in rk_rsa_padding_check_pss_type()
1014 	res = mgf_mask(p, siglen - hlen - 1, p + siglen - hlen - 1, hlen, hash_algo, hash_len);  in rk_rsa_padding_check_pss_type()
1066 	if (memcmp(p + slen, result, hlen) == 0)  in rk_rsa_padding_check_pss_type()