sig []byte) error { fipsSelfTest() fips140.RecordApproved() checkApprovedHashNam(hash) return verifyPKCS1v15(pub, hash, hashed, sig) } func verifyPKCS1v15(pub *PublicKey, hash string, hashed []byte, sig []byte) error { if fipsApproved, err := checkPublicKey(pub); err != nil { return err } else if !fipsApproved { fips140.RecordNonApproved() } // RFC 8017 Section 8.2.2: If the length of the signature S is not k // octets (where k is the length in octets of the RSA modulus n), output // "invalid signature"...