1623     unsigned int hlen;  in mgf_mask()  local
1641     hlen = mbedtls_md_get_size(md_info);  in mgf_mask()
1650         use_len = hlen;  in mgf_mask()
1651         if (dlen < hlen) {  in mgf_mask()
1694 static int hash_mprime(const unsigned char *hash, size_t hlen,  in hash_mprime()  argument
1718     if ((ret = mbedtls_md_update(&md_ctx, hash, hlen)) != 0) {  in hash_mprime()
1772     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()  local
1778     hlen = mbedtls_md_get_size_from_type((mbedtls_md_type_t) ctx->hash_id);  in mbedtls_rsa_rsaes_oaep_encrypt()
1779     if (hlen == 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1786     if (ilen + 2 * hlen + 2 < ilen || olen < ilen + 2 * hlen + 2) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1795     if ((ret = f_rng(p_rng, p, hlen)) != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1799     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1806     p += hlen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1807     p += olen - 2 * hlen - 2 - ilen;  in mbedtls_rsa_rsaes_oaep_encrypt()
1814     if ((ret = mgf_mask(output + hlen + 1, olen - hlen - 1, output + 1, hlen,  in mbedtls_rsa_rsaes_oaep_encrypt()
1820     if ((ret = mgf_mask(output + 1, hlen, output + hlen + 1, olen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_encrypt()
1931     unsigned int hlen;  in mbedtls_rsa_rsaes_oaep_decrypt()  local
1946     hlen = mbedtls_md_get_size_from_type((mbedtls_md_type_t) ctx->hash_id);  in mbedtls_rsa_rsaes_oaep_decrypt()
1947     if (hlen == 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1952     if (2 * hlen + 2 > ilen) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1969     if ((ret = mgf_mask(buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_decrypt()
1972         (ret = mgf_mask(buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen,  in mbedtls_rsa_rsaes_oaep_decrypt()
1991     p += hlen; /* Skip seed */  in mbedtls_rsa_rsaes_oaep_decrypt()
1994     bad = mbedtls_ct_bool_or(bad, mbedtls_ct_bool(mbedtls_ct_memcmp(lhash, p, hlen)));  in mbedtls_rsa_rsaes_oaep_decrypt()
1995     p += hlen;  in mbedtls_rsa_rsaes_oaep_decrypt()
2001     for (i = 0; i < ilen - 2 * hlen - 2; i++) {  in mbedtls_rsa_rsaes_oaep_decrypt()
2124     size_t slen, min_slen, hlen, offset = 0;  in rsa_rsassa_pss_sign_no_mode_check()  local
2155     hlen = mbedtls_md_get_size_from_type(hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2156     if (hlen == 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2168         min_slen = hlen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2169         if (olen < hlen + min_slen + 2) {  in rsa_rsassa_pss_sign_no_mode_check()
2171         } else if (olen >= hlen + hlen + 2) {  in rsa_rsassa_pss_sign_no_mode_check()
2172             slen = hlen;  in rsa_rsassa_pss_sign_no_mode_check()
2174             slen = olen - hlen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2176     } else if ((saltlen < 0) || (saltlen + hlen + 2 > olen)) {  in rsa_rsassa_pss_sign_no_mode_check()
2186     p += olen - hlen - slen - 2;  in rsa_rsassa_pss_sign_no_mode_check()
2209     ret = mgf_mask(sig + offset, olen - hlen - 1 - offset, p, hlen, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2217     p += hlen;  in rsa_rsassa_pss_sign_no_mode_check()
2543     unsigned int hlen;  in mbedtls_rsa_rsassa_pss_verify_ext()  local
2581     hlen = mbedtls_md_get_size_from_type(mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2582     if (hlen == 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2601     if (siglen < hlen + 2) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2604     hash_start = p + siglen - hlen - 1;  in mbedtls_rsa_rsassa_pss_verify_ext()
2606     ret = mgf_mask(p, siglen - hlen - 1, hash_start, hlen, mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2637     if (memcmp(hash_start, result, hlen) != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()