dbMask. mgf1XOR(db, hash, h) // 9. Set the leftmost 8 * emLen - emBits bits of the leftmost octet in DB // to zero. db[0] &= bitMask // If we don't know the salt length, look for the 0x01 delimiter. if sLen == pssSaltLengthAutodet { psLen := bytes.IndexByte(db, 0x01) if psLen < 0 { return ErrVerification } sLen = len(db) - psLen - 1 } // FIPS 186-5, Section 5.4(g): "the length (in bytes) of the salt (sLen) // shall satisfy 0 ≤ sLen ≤ hLen". if sLen > hLen { fips140.RecordNonApproved() } // 10. If the...