fips140.RecordApproved() checkApprovedHashNam(hash) return signPKCS1v15(priv, hash, hashed) } func signPKCS1v15(priv *PrivateKey, hash string, hashed []byte) ([]byte, error) { em, err := pkcs1v15ConstructEM(&priv.pub, hash, hashed) if err != nil { return nil, err } return decrypt(priv, em, withCheck) } func pkcs1v15ConstructEM(pub *PublicKey, hash string, hashed []byte) ([]byte, error) { // Special case: "" is used to indicate that the data is signed directly. var prefix []byte if hash != "" { var ok bool...