233     mbedtls_pk_type_t sig_alg;  in ssl_tls13_parse_certificate_verify()  local
279             algorithm, &sig_alg, &md_alg) != 0) {  in ssl_tls13_parse_certificate_verify()
294     if (!mbedtls_pk_can_do(&ssl->session_negotiate->peer_cert->pk, sig_alg)) {  in ssl_tls13_parse_certificate_verify()
317     if (sig_alg == MBEDTLS_PK_RSASSA_PSS) {  in ssl_tls13_parse_certificate_verify()
325     if ((ret = mbedtls_pk_verify_ext(sig_alg, options,  in ssl_tls13_parse_certificate_verify()
854 int mbedtls_ssl_tls13_check_sig_alg_cert_key_match(uint16_t sig_alg,  in mbedtls_ssl_tls13_check_sig_alg_cert_key_match()  argument
865                         sig_alg == MBEDTLS_TLS1_3_SIG_ECDSA_SECP256R1_SHA256;  in mbedtls_ssl_tls13_check_sig_alg_cert_key_match()
869                         sig_alg == MBEDTLS_TLS1_3_SIG_ECDSA_SECP384R1_SHA384;  in mbedtls_ssl_tls13_check_sig_alg_cert_key_match()
873                         sig_alg == MBEDTLS_TLS1_3_SIG_ECDSA_SECP521R1_SHA512;  in mbedtls_ssl_tls13_check_sig_alg_cert_key_match()
880             switch (sig_alg) {  in mbedtls_ssl_tls13_check_sig_alg_cert_key_match()
913     uint16_t *sig_alg = ssl->handshake->received_sig_algs;  in ssl_tls13_write_certificate_verify_body()  local
950     for (; *sig_alg != MBEDTLS_TLS1_3_SIG_NONE; sig_alg++) {  in ssl_tls13_write_certificate_verify_body()
958         if (!mbedtls_ssl_sig_alg_is_offered(ssl, *sig_alg)) {  in ssl_tls13_write_certificate_verify_body()
962         if (!mbedtls_ssl_tls13_sig_alg_for_cert_verify_is_supported(*sig_alg)) {  in ssl_tls13_write_certificate_verify_body()
966         if (!mbedtls_ssl_tls13_check_sig_alg_cert_key_match(*sig_alg, own_key)) {  in ssl_tls13_write_certificate_verify_body()
971                 *sig_alg, &pk_type, &md_alg) != 0) {  in ssl_tls13_write_certificate_verify_body()
993                                       mbedtls_ssl_sig_alg_to_str(*sig_alg)));  in ssl_tls13_write_certificate_verify_body()
1005                                   mbedtls_ssl_sig_alg_to_str(*sig_alg)));  in ssl_tls13_write_certificate_verify_body()
1010     if (*sig_alg == MBEDTLS_TLS1_3_SIG_NONE) {  in ssl_tls13_write_certificate_verify_body()
1017     MBEDTLS_PUT_UINT16_BE(*sig_alg, p, 0);  in ssl_tls13_write_certificate_verify_body()