65     int ret;  in asn1_get_nonzero_mpi()  local
67     ret = mbedtls_asn1_get_mpi(p, end, X);  in asn1_get_nonzero_mpi()
68     if (ret != 0) {  in asn1_get_nonzero_mpi()
69         return ret;  in asn1_get_nonzero_mpi()
81     int ret, version;  in mbedtls_rsa_parse_key()  local
107     if ((ret = mbedtls_asn1_get_tag(&p, end, &len,  in mbedtls_rsa_parse_key()
109         return ret;  in mbedtls_rsa_parse_key()
116     if ((ret = mbedtls_asn1_get_int(&p, end, &version)) != 0) {  in mbedtls_rsa_parse_key()
117         return ret;  in mbedtls_rsa_parse_key()
125     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
126         (ret = mbedtls_rsa_import(rsa, &T, NULL, NULL,  in mbedtls_rsa_parse_key()
132     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
133         (ret = mbedtls_rsa_import(rsa, NULL, NULL, NULL,  in mbedtls_rsa_parse_key()
139     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
140         (ret = mbedtls_rsa_import(rsa, NULL, NULL, NULL,  in mbedtls_rsa_parse_key()
146     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
147         (ret = mbedtls_rsa_import(rsa, NULL, &T, NULL,  in mbedtls_rsa_parse_key()
153     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
154         (ret = mbedtls_rsa_import(rsa, NULL, NULL, &T,  in mbedtls_rsa_parse_key()
172     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
173         (ret = mbedtls_mpi_copy(&rsa->DP, &T)) != 0) {  in mbedtls_rsa_parse_key()
178     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
179         (ret = mbedtls_mpi_copy(&rsa->DQ, &T)) != 0) {  in mbedtls_rsa_parse_key()
184     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
185         (ret = mbedtls_mpi_copy(&rsa->QP, &T)) != 0) {  in mbedtls_rsa_parse_key()
191     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
192         (ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
193         (ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0) {  in mbedtls_rsa_parse_key()
207     if ((ret = mbedtls_rsa_complete(rsa)) != 0 ||  in mbedtls_rsa_parse_key()
208         (ret = mbedtls_rsa_check_pubkey(rsa)) != 0) {  in mbedtls_rsa_parse_key()
213         ret = MBEDTLS_ERR_ASN1_LENGTH_MISMATCH;  in mbedtls_rsa_parse_key()
220     if (ret != 0) {  in mbedtls_rsa_parse_key()
224     return ret;  in mbedtls_rsa_parse_key()
231     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_parse_pubkey()  local
241     if ((ret = mbedtls_asn1_get_tag(&p, end, &len,  in mbedtls_rsa_parse_pubkey()
243         return ret;  in mbedtls_rsa_parse_pubkey()
251     if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_INTEGER)) != 0) {  in mbedtls_rsa_parse_pubkey()
252         return ret;  in mbedtls_rsa_parse_pubkey()
255     if ((ret = mbedtls_rsa_import_raw(rsa, p, len, NULL, 0, NULL, 0,  in mbedtls_rsa_parse_pubkey()
263     if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_INTEGER)) != 0) {  in mbedtls_rsa_parse_pubkey()
264         return ret;  in mbedtls_rsa_parse_pubkey()
267     if ((ret = mbedtls_rsa_import_raw(rsa, NULL, 0, NULL, 0, NULL, 0,  in mbedtls_rsa_parse_pubkey()
290     int ret;  in mbedtls_rsa_write_key()  local
301     if ((ret = mbedtls_rsa_export_crt(rsa, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_key()
302         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
305     len += ret;  in mbedtls_rsa_write_key()
308     if ((ret = mbedtls_rsa_export_crt(rsa, NULL, &T, NULL)) != 0 ||  in mbedtls_rsa_write_key()
309         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
312     len += ret;  in mbedtls_rsa_write_key()
315     if ((ret = mbedtls_rsa_export_crt(rsa, &T, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
316         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
319     len += ret;  in mbedtls_rsa_write_key()
322     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, &T, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
323         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
326     len += ret;  in mbedtls_rsa_write_key()
329     if ((ret = mbedtls_rsa_export(rsa, NULL, &T, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
330         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
333     len += ret;  in mbedtls_rsa_write_key()
336     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, &T, NULL)) != 0 ||  in mbedtls_rsa_write_key()
337         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
340     len += ret;  in mbedtls_rsa_write_key()
343     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_key()
344         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
347     len += ret;  in mbedtls_rsa_write_key()
350     if ((ret = mbedtls_rsa_export(rsa, &T, NULL, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
351         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
354     len += ret;  in mbedtls_rsa_write_key()
359     if (ret < 0) {  in mbedtls_rsa_write_key()
360         return ret;  in mbedtls_rsa_write_key()
381     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_write_pubkey()  local
388     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_pubkey()
389         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_pubkey()
392     len += ret;  in mbedtls_rsa_write_pubkey()
395     if ((ret = mbedtls_rsa_export(rsa, &T, NULL, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_pubkey()
396         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_pubkey()
399     len += ret;  in mbedtls_rsa_write_pubkey()
404     if (ret < 0) {  in mbedtls_rsa_write_pubkey()
405         return ret;  in mbedtls_rsa_write_pubkey()
449     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()  local
516     ret = mbedtls_ct_error_if(  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
565     return ret;  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
577     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_import()  local
579     if ((N != NULL && (ret = mbedtls_mpi_copy(&ctx->N, N)) != 0) ||  in mbedtls_rsa_import()
580         (P != NULL && (ret = mbedtls_mpi_copy(&ctx->P, P)) != 0) ||  in mbedtls_rsa_import()
581         (Q != NULL && (ret = mbedtls_mpi_copy(&ctx->Q, Q)) != 0) ||  in mbedtls_rsa_import()
582         (D != NULL && (ret = mbedtls_mpi_copy(&ctx->D, D)) != 0) ||  in mbedtls_rsa_import()
583         (E != NULL && (ret = mbedtls_mpi_copy(&ctx->E, E)) != 0)) {  in mbedtls_rsa_import()
584         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_import()
601     int ret = 0;  in mbedtls_rsa_import_raw()  local
626     if (ret != 0) {  in mbedtls_rsa_import_raw()
627         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_import_raw()
724     int ret = 0;  in mbedtls_rsa_complete()  local
770         if ((ret = mbedtls_mpi_mul_mpi(&ctx->N, &ctx->P,  in mbedtls_rsa_complete()
772             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
783         ret = mbedtls_rsa_deduce_primes(&ctx->N, &ctx->E, &ctx->D,  in mbedtls_rsa_complete()
785         if (ret != 0) {  in mbedtls_rsa_complete()
786             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
790         if ((ret = mbedtls_rsa_deduce_private_exponent(&ctx->P,  in mbedtls_rsa_complete()
794             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
805         ret = mbedtls_rsa_deduce_crt(&ctx->P,  &ctx->Q,  &ctx->D,  in mbedtls_rsa_complete()
807         if (ret != 0) {  in mbedtls_rsa_complete()
808             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
827     int ret = 0;  in mbedtls_rsa_export_raw()  local
869     return ret;  in mbedtls_rsa_export_raw()
876     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_export()  local
898     if ((N != NULL && (ret = mbedtls_mpi_copy(N, &ctx->N)) != 0) ||  in mbedtls_rsa_export()
899         (P != NULL && (ret = mbedtls_mpi_copy(P, &ctx->P)) != 0) ||  in mbedtls_rsa_export()
900         (Q != NULL && (ret = mbedtls_mpi_copy(Q, &ctx->Q)) != 0) ||  in mbedtls_rsa_export()
901         (D != NULL && (ret = mbedtls_mpi_copy(D, &ctx->D)) != 0) ||  in mbedtls_rsa_export()
902         (E != NULL && (ret = mbedtls_mpi_copy(E, &ctx->E)) != 0)) {  in mbedtls_rsa_export()
903         return ret;  in mbedtls_rsa_export()
918     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_export_crt()  local
935     if ((DP != NULL && (ret = mbedtls_mpi_copy(DP, &ctx->DP)) != 0) ||  in mbedtls_rsa_export_crt()
936         (DQ != NULL && (ret = mbedtls_mpi_copy(DQ, &ctx->DQ)) != 0) ||  in mbedtls_rsa_export_crt()
937         (QP != NULL && (ret = mbedtls_mpi_copy(QP, &ctx->QP)) != 0)) {  in mbedtls_rsa_export_crt()
938         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_export_crt()
941     if ((ret = mbedtls_rsa_deduce_crt(&ctx->P, &ctx->Q, &ctx->D,  in mbedtls_rsa_export_crt()
943         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_export_crt()
1049     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_gen_key()  local
1067         ret = MBEDTLS_ERR_RSA_BAD_INPUT_DATA;  in mbedtls_rsa_gen_key()
1072         ret = MBEDTLS_ERR_RSA_BAD_INPUT_DATA;  in mbedtls_rsa_gen_key()
1152     if (ret != 0) {  in mbedtls_rsa_gen_key()
1155         if ((-ret & ~0x7f) == 0) {  in mbedtls_rsa_gen_key()
1156             ret = MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_KEY_GEN_FAILED, ret);  in mbedtls_rsa_gen_key()
1158         return ret;  in mbedtls_rsa_gen_key()
1239     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_public()  local
1250     if ((ret = mbedtls_mutex_lock(&ctx->mutex)) != 0) {  in mbedtls_rsa_public()
1251         return ret;  in mbedtls_rsa_public()
1258         ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;  in mbedtls_rsa_public()
1275     if (ret != 0) {  in mbedtls_rsa_public()
1276         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_PUBLIC_FAILED, ret);  in mbedtls_rsa_public()
1291     int ret, count = 0;  in rsa_prepare_blinding()  local
1309             ret = MBEDTLS_ERR_RSA_RNG_FAILED;  in rsa_prepare_blinding()
1324         ret = mbedtls_mpi_inv_mod(&ctx->Vi, &ctx->Vi, &ctx->N);  in rsa_prepare_blinding()
1325         if (ret != 0 && ret != MBEDTLS_ERR_MPI_NOT_ACCEPTABLE) {  in rsa_prepare_blinding()
1329     } while (ret == MBEDTLS_ERR_MPI_NOT_ACCEPTABLE);  in rsa_prepare_blinding()
1343     return ret;  in rsa_prepare_blinding()
1352     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in rsa_unblind()  local
1382     return ret;  in rsa_unblind()
1415     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_private()  local
1451     if ((ret = mbedtls_mutex_lock(&ctx->mutex)) != 0) {  in mbedtls_rsa_private()
1452         return ret;  in mbedtls_rsa_private()
1481         ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;  in mbedtls_rsa_private()
1561         ret = MBEDTLS_ERR_RSA_VERIFY_FAILED;  in mbedtls_rsa_private()
1601     if (ret != 0 && ret >= -0x007f) {  in mbedtls_rsa_private()
1602         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_PRIVATE_FAILED, ret);  in mbedtls_rsa_private()
1605     return ret;  in mbedtls_rsa_private()
1626     int ret = 0;  in mgf_mask()  local
1637     if ((ret = mbedtls_md_setup(&md_ctx, md_info, 0)) != 0) {  in mgf_mask()
1655         if ((ret = mbedtls_md_starts(&md_ctx)) != 0) {  in mgf_mask()
1658         if ((ret = mbedtls_md_update(&md_ctx, src, slen)) != 0) {  in mgf_mask()
1661         if ((ret = mbedtls_md_update(&md_ctx, counter, 4)) != 0) {  in mgf_mask()
1664         if ((ret = mbedtls_md_finish(&md_ctx, mask)) != 0) {  in mgf_mask()
1681     return ret;  in mgf_mask()
1701     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in hash_mprime()  local
1709     if ((ret = mbedtls_md_setup(&md_ctx, md_info, 0)) != 0) {  in hash_mprime()
1712     if ((ret = mbedtls_md_starts(&md_ctx)) != 0) {  in hash_mprime()
1715     if ((ret = mbedtls_md_update(&md_ctx, zeros, sizeof(zeros))) != 0) {  in hash_mprime()
1718     if ((ret = mbedtls_md_update(&md_ctx, hash, hlen)) != 0) {  in hash_mprime()
1721     if ((ret = mbedtls_md_update(&md_ctx, salt, slen)) != 0) {  in hash_mprime()
1724     if ((ret = mbedtls_md_finish(&md_ctx, out)) != 0) {  in hash_mprime()
1731     return ret;  in hash_mprime()
1770     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_oaep_encrypt()  local
1795     if ((ret = f_rng(p_rng, p, hlen)) != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1796         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in mbedtls_rsa_rsaes_oaep_encrypt()
1802     ret = compute_hash((mbedtls_md_type_t) ctx->hash_id, label, label_len, p);  in mbedtls_rsa_rsaes_oaep_encrypt()
1803     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1804         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1814     if ((ret = mgf_mask(output + hlen + 1, olen - hlen - 1, output + 1, hlen,  in mbedtls_rsa_rsaes_oaep_encrypt()
1816         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1820     if ((ret = mgf_mask(output + 1, hlen, output + hlen + 1, olen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_encrypt()
1822         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1840     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()  local
1864             ret = f_rng(p_rng, p, 1);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1865         } while (*p == 0 && --rng_dl && ret == 0);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1868         if (rng_dl == 0 || ret != 0) {  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1869             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1925     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_oaep_decrypt()  local
1959     ret = mbedtls_rsa_private(ctx, f_rng, p_rng, input, buf);  in mbedtls_rsa_rsaes_oaep_decrypt()
1961     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1969     if ((ret = mgf_mask(buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_decrypt()
1972         (ret = mgf_mask(buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen,  in mbedtls_rsa_rsaes_oaep_decrypt()
1978     ret = compute_hash((mbedtls_md_type_t) ctx->hash_id,  in mbedtls_rsa_rsaes_oaep_decrypt()
1980     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
2016         ret = MBEDTLS_ERR_RSA_INVALID_PADDING;  in mbedtls_rsa_rsaes_oaep_decrypt()
2021         ret = MBEDTLS_ERR_RSA_OUTPUT_TOO_LARGE;  in mbedtls_rsa_rsaes_oaep_decrypt()
2029     ret = 0;  in mbedtls_rsa_rsaes_oaep_decrypt()
2035     return ret;  in mbedtls_rsa_rsaes_oaep_decrypt()
2051     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()  local
2065     ret = mbedtls_rsa_private(ctx, f_rng, p_rng, input, buf);  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2067     if (ret != 0) {  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2071     ret = mbedtls_ct_rsaes_pkcs1_v15_unpadding(buf, ilen,  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2077     return ret;  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2125     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in rsa_rsassa_pss_sign_no_mode_check()  local
2191     if ((ret = f_rng(p_rng, salt, slen)) != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2192         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in rsa_rsassa_pss_sign_no_mode_check()
2198     ret = hash_mprime(hash, hashlen, salt, slen, p, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2199     if (ret != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2200         return ret;  in rsa_rsassa_pss_sign_no_mode_check()
2209     ret = mgf_mask(sig + offset, olen - hlen - 1 - offset, p, hlen, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2210     if (ret != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2211         return ret;  in rsa_rsassa_pss_sign_no_mode_check()
2435     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()  local
2450     if ((ret = rsa_rsassa_pkcs1_v15_encode(md_alg, hashlen, hash,  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2452         return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2476         ret = MBEDTLS_ERR_RSA_PRIVATE_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2486     if (ret != 0) {  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2489     return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2538     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsassa_pss_verify_ext()  local
2557     ret = mbedtls_rsa_public(ctx, sig, buf);  in mbedtls_rsa_rsassa_pss_verify_ext()
2559     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2560         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2606     ret = mgf_mask(p, siglen - hlen - 1, hash_start, hlen, mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2607     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2608         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2631     ret = hash_mprime(hash, hashlen, p, observed_salt_len,  in mbedtls_rsa_rsassa_pss_verify_ext()
2633     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2634         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2681     int ret = 0;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()  local
2697         ret = MBEDTLS_ERR_MPI_ALLOC_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2701     if ((ret = rsa_rsassa_pkcs1_v15_encode(md_alg, hashlen, hash, sig_len,  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2710     ret = mbedtls_rsa_public(ctx, sig, encoded);  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2711     if (ret != 0) {  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2719     if ((ret = mbedtls_ct_memcmp(encoded, encoded_expected,  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2721         ret = MBEDTLS_ERR_RSA_VERIFY_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2735     return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2775     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_copy()  local
2803     if (ret != 0) {  in mbedtls_rsa_copy()
2807     return ret;  in mbedtls_rsa_copy()
2919     int ret = 0;  in mbedtls_rsa_self_test()  local
2958         ret = 1;  in mbedtls_rsa_self_test()
2975         ret = 1;  in mbedtls_rsa_self_test()
2990         ret = 1;  in mbedtls_rsa_self_test()
2999         ret = 1;  in mbedtls_rsa_self_test()
3028         ret = 1;  in mbedtls_rsa_self_test()
3042         ret = 1;  in mbedtls_rsa_self_test()
3061     return ret;  in mbedtls_rsa_self_test()