hash.Write(salt) h0 := hash.Sum(nil) // 14. If H = H', output "consistent." Otherwise, output "inconsistent." if !bytes.Equal(h0, h) { // TODO: constant time? return ErrVerification } return nil } // PSSMaxSaltLength returns the maximum salt length for a given public key and // hash function. func PSSMaxSaltLength(pub *PublicKey, hash fips140.Hash) (int, error) { saltLength := (pub.N.BitLen()-1+7)/8 - 2 - hash.Size() if saltLength < 0 { return 0, ErrMessageTooLong } // FIPS 186-5, Section 5.4(g): "the length...