key and // hash function. func PSSMaxSaltLength(pub *PublicKey, hash fips140.Hash) (int, error) { saltLength := (pub.N.BitLen()-1+7)/8 - 2 - hash.Size() if saltLength < 0 { return 0, ErrMessageTooLong } // FIPS 186-5, Section 5.4(g): "the length (in bytes) of the salt (sLen) // shall satisfy 0 ≤ sLen ≤ hLen". if fips140.Enabled && saltLength > hash.Size() { return hash.Size(), nil } return saltLength, nil } // SignPSS calculates the signature of hashed using RSASSA-PSS. func SignPSS(rand io.Reader,...