1625     unsigned int hlen;  in mgf_mask()  local
1643     hlen = mbedtls_md_get_size(md_info);  in mgf_mask()
1652         use_len = hlen;  in mgf_mask()
1653         if (dlen < hlen) {  in mgf_mask()
1696 static int hash_mprime(const unsigned char *hash, size_t hlen,  in hash_mprime()  argument
1720     if ((ret = mbedtls_md_update(&md_ctx, hash, hlen)) != 0) {  in hash_mprime()
1774     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()  local
1780     hlen = mbedtls_md_get_size_from_type((mbedtls_md_type_t) ctx->hash_id);  in mbedtls_rsa_rsaes_oaep_encrypt()
1781     if (hlen == 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1788     if (ilen + 2 * hlen + 2 < ilen || olen < ilen + 2 * hlen + 2) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1797     if ((ret = f_rng(p_rng, p, hlen)) != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1801     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1808     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1809     p += olen - 2 * hlen - 2 - ilen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1816     if ((ret = mgf_mask(output + hlen + 1, olen - hlen - 1, output + 1, hlen,  in mbedtls_rsa_rsaes_oaep_encrypt()
1822     if ((ret = mgf_mask(output + 1, hlen, output + hlen + 1, olen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_encrypt()
1933     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_decrypt()  local
1948     hlen = mbedtls_md_get_size_from_type((mbedtls_md_type_t) ctx->hash_id);  in mbedtls_rsa_rsaes_oaep_decrypt()
1949     if (hlen == 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1954     if (2 * hlen + 2 > ilen) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1974     if ((ret = mgf_mask(buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_decrypt()
1977         (ret = mgf_mask(buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen,  in mbedtls_rsa_rsaes_oaep_decrypt()
1996     p += hlen; /* Skip seed */  in mbedtls_rsa_rsaes_oaep_decrypt()
1999     bad = mbedtls_ct_bool_or(bad, mbedtls_ct_bool(mbedtls_ct_memcmp(lhash, p, hlen)));  in mbedtls_rsa_rsaes_oaep_decrypt()
2000     p += hlen;  in mbedtls_rsa_rsaes_oaep_decrypt()
2006     for (i = 0; i < ilen - 2 * hlen - 2; i++) {  in mbedtls_rsa_rsaes_oaep_decrypt()
2129     size_t slen, min_slen, hlen, offset = 0;  in rsa_rsassa_pss_sign_no_mode_check()  local
2160     hlen = mbedtls_md_get_size_from_type(hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2161     if (hlen == 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2173         min_slen = hlen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2174         if (olen < hlen + min_slen + 2) {  in rsa_rsassa_pss_sign_no_mode_check()
2176         } else if (olen >= hlen + hlen + 2) {  in rsa_rsassa_pss_sign_no_mode_check()
2177             slen = hlen;  in rsa_rsassa_pss_sign_no_mode_check()
2179             slen = olen - hlen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2181     } else if ((saltlen < 0) || (saltlen + hlen + 2 > olen)) {  in rsa_rsassa_pss_sign_no_mode_check()
2191     p += olen - hlen - slen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2214     ret = mgf_mask(sig + offset, olen - hlen - 1 - offset, p, hlen, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2222     p += hlen;  in rsa_rsassa_pss_sign_no_mode_check()
2551     unsigned int hlen;  in mbedtls_rsa_rsassa_pss_verify_ext()  local
2589     hlen = mbedtls_md_get_size_from_type(mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2590     if (hlen == 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2609     if (siglen < hlen + 2) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2612     hash_start = p + siglen - hlen - 1;  in mbedtls_rsa_rsassa_pss_verify_ext()
2614     ret = mgf_mask(p, siglen - hlen - 1, hash_start, hlen, mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2645     if (FTMN_CALLEE_DONE_MEMCMP(memcmp, hash_start, result, hlen) != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()