64     int ret;  in asn1_get_nonzero_mpi()  local
66     ret = mbedtls_asn1_get_mpi(p, end, X);  in asn1_get_nonzero_mpi()
67     if (ret != 0) {  in asn1_get_nonzero_mpi()
68         return ret;  in asn1_get_nonzero_mpi()
80     int ret, version;  in mbedtls_rsa_parse_key()  local
106     if ((ret = mbedtls_asn1_get_tag(&p, end, &len,  in mbedtls_rsa_parse_key()
108         return ret;  in mbedtls_rsa_parse_key()
115     if ((ret = mbedtls_asn1_get_int(&p, end, &version)) != 0) {  in mbedtls_rsa_parse_key()
116         return ret;  in mbedtls_rsa_parse_key()
124     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
125         (ret = mbedtls_rsa_import(rsa, &T, NULL, NULL,  in mbedtls_rsa_parse_key()
131     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
132         (ret = mbedtls_rsa_import(rsa, NULL, NULL, NULL,  in mbedtls_rsa_parse_key()
138     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
139         (ret = mbedtls_rsa_import(rsa, NULL, NULL, NULL,  in mbedtls_rsa_parse_key()
145     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
146         (ret = mbedtls_rsa_import(rsa, NULL, &T, NULL,  in mbedtls_rsa_parse_key()
152     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
153         (ret = mbedtls_rsa_import(rsa, NULL, NULL, &T,  in mbedtls_rsa_parse_key()
171     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
172         (ret = mbedtls_mpi_copy(&rsa->DP, &T)) != 0) {  in mbedtls_rsa_parse_key()
177     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
178         (ret = mbedtls_mpi_copy(&rsa->DQ, &T)) != 0) {  in mbedtls_rsa_parse_key()
183     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
184         (ret = mbedtls_mpi_copy(&rsa->QP, &T)) != 0) {  in mbedtls_rsa_parse_key()
190     if ((ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
191         (ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0 ||  in mbedtls_rsa_parse_key()
192         (ret = asn1_get_nonzero_mpi(&p, end, &T)) != 0) {  in mbedtls_rsa_parse_key()
206     if ((ret = mbedtls_rsa_complete(rsa)) != 0 ||  in mbedtls_rsa_parse_key()
207         (ret = mbedtls_rsa_check_pubkey(rsa)) != 0) {  in mbedtls_rsa_parse_key()
212         ret = MBEDTLS_ERR_ASN1_LENGTH_MISMATCH;  in mbedtls_rsa_parse_key()
219     if (ret != 0) {  in mbedtls_rsa_parse_key()
223     return ret;  in mbedtls_rsa_parse_key()
230     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_parse_pubkey()  local
240     if ((ret = mbedtls_asn1_get_tag(&p, end, &len,  in mbedtls_rsa_parse_pubkey()
242         return ret;  in mbedtls_rsa_parse_pubkey()
250     if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_INTEGER)) != 0) {  in mbedtls_rsa_parse_pubkey()
251         return ret;  in mbedtls_rsa_parse_pubkey()
254     if ((ret = mbedtls_rsa_import_raw(rsa, p, len, NULL, 0, NULL, 0,  in mbedtls_rsa_parse_pubkey()
262     if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_INTEGER)) != 0) {  in mbedtls_rsa_parse_pubkey()
263         return ret;  in mbedtls_rsa_parse_pubkey()
266     if ((ret = mbedtls_rsa_import_raw(rsa, NULL, 0, NULL, 0, NULL, 0,  in mbedtls_rsa_parse_pubkey()
289     int ret;  in mbedtls_rsa_write_key()  local
300     if ((ret = mbedtls_rsa_export_crt(rsa, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_key()
301         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
304     len += ret;  in mbedtls_rsa_write_key()
307     if ((ret = mbedtls_rsa_export_crt(rsa, NULL, &T, NULL)) != 0 ||  in mbedtls_rsa_write_key()
308         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
311     len += ret;  in mbedtls_rsa_write_key()
314     if ((ret = mbedtls_rsa_export_crt(rsa, &T, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
315         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
318     len += ret;  in mbedtls_rsa_write_key()
321     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, &T, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
322         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
325     len += ret;  in mbedtls_rsa_write_key()
328     if ((ret = mbedtls_rsa_export(rsa, NULL, &T, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
329         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
332     len += ret;  in mbedtls_rsa_write_key()
335     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, &T, NULL)) != 0 ||  in mbedtls_rsa_write_key()
336         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
339     len += ret;  in mbedtls_rsa_write_key()
342     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_key()
343         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
346     len += ret;  in mbedtls_rsa_write_key()
349     if ((ret = mbedtls_rsa_export(rsa, &T, NULL, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_key()
350         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_key()
353     len += ret;  in mbedtls_rsa_write_key()
358     if (ret < 0) {  in mbedtls_rsa_write_key()
359         return ret;  in mbedtls_rsa_write_key()
380     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_write_pubkey()  local
387     if ((ret = mbedtls_rsa_export(rsa, NULL, NULL, NULL, NULL, &T)) != 0 ||  in mbedtls_rsa_write_pubkey()
388         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_pubkey()
391     len += ret;  in mbedtls_rsa_write_pubkey()
394     if ((ret = mbedtls_rsa_export(rsa, &T, NULL, NULL, NULL, NULL)) != 0 ||  in mbedtls_rsa_write_pubkey()
395         (ret = mbedtls_asn1_write_mpi(p, start, &T)) < 0) {  in mbedtls_rsa_write_pubkey()
398     len += ret;  in mbedtls_rsa_write_pubkey()
403     if (ret < 0) {  in mbedtls_rsa_write_pubkey()
404         return ret;  in mbedtls_rsa_write_pubkey()
448     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()  local
515     ret = mbedtls_ct_error_if(  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
564     return ret;  in mbedtls_ct_rsaes_pkcs1_v15_unpadding()
576     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_import()  local
578     if ((N != NULL && (ret = mbedtls_mpi_copy(&ctx->N, N)) != 0) ||  in mbedtls_rsa_import()
579         (P != NULL && (ret = mbedtls_mpi_copy(&ctx->P, P)) != 0) ||  in mbedtls_rsa_import()
580         (Q != NULL && (ret = mbedtls_mpi_copy(&ctx->Q, Q)) != 0) ||  in mbedtls_rsa_import()
581         (D != NULL && (ret = mbedtls_mpi_copy(&ctx->D, D)) != 0) ||  in mbedtls_rsa_import()
582         (E != NULL && (ret = mbedtls_mpi_copy(&ctx->E, E)) != 0)) {  in mbedtls_rsa_import()
583         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_import()
600     int ret = 0;  in mbedtls_rsa_import_raw()  local
625     if (ret != 0) {  in mbedtls_rsa_import_raw()
626         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_import_raw()
723     int ret = 0;  in mbedtls_rsa_complete()  local
769         if ((ret = mbedtls_mpi_mul_mpi(&ctx->N, &ctx->P,  in mbedtls_rsa_complete()
771             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
782         ret = mbedtls_rsa_deduce_primes(&ctx->N, &ctx->E, &ctx->D,  in mbedtls_rsa_complete()
784         if (ret != 0) {  in mbedtls_rsa_complete()
785             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
789         if ((ret = mbedtls_rsa_deduce_private_exponent(&ctx->P,  in mbedtls_rsa_complete()
793             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
804         ret = mbedtls_rsa_deduce_crt(&ctx->P,  &ctx->Q,  &ctx->D,  in mbedtls_rsa_complete()
806         if (ret != 0) {  in mbedtls_rsa_complete()
807             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_complete()
826     int ret = 0;  in mbedtls_rsa_export_raw()  local
868     return ret;  in mbedtls_rsa_export_raw()
875     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_export()  local
897     if ((N != NULL && (ret = mbedtls_mpi_copy(N, &ctx->N)) != 0) ||  in mbedtls_rsa_export()
898         (P != NULL && (ret = mbedtls_mpi_copy(P, &ctx->P)) != 0) ||  in mbedtls_rsa_export()
899         (Q != NULL && (ret = mbedtls_mpi_copy(Q, &ctx->Q)) != 0) ||  in mbedtls_rsa_export()
900         (D != NULL && (ret = mbedtls_mpi_copy(D, &ctx->D)) != 0) ||  in mbedtls_rsa_export()
901         (E != NULL && (ret = mbedtls_mpi_copy(E, &ctx->E)) != 0)) {  in mbedtls_rsa_export()
902         return ret;  in mbedtls_rsa_export()
917     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_export_crt()  local
934     if ((DP != NULL && (ret = mbedtls_mpi_copy(DP, &ctx->DP)) != 0) ||  in mbedtls_rsa_export_crt()
935         (DQ != NULL && (ret = mbedtls_mpi_copy(DQ, &ctx->DQ)) != 0) ||  in mbedtls_rsa_export_crt()
936         (QP != NULL && (ret = mbedtls_mpi_copy(QP, &ctx->QP)) != 0)) {  in mbedtls_rsa_export_crt()
937         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_export_crt()
940     if ((ret = mbedtls_rsa_deduce_crt(&ctx->P, &ctx->Q, &ctx->D,  in mbedtls_rsa_export_crt()
942         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_BAD_INPUT_DATA, ret);  in mbedtls_rsa_export_crt()
1048     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_gen_key()  local
1066         ret = MBEDTLS_ERR_RSA_BAD_INPUT_DATA;  in mbedtls_rsa_gen_key()
1071         ret = MBEDTLS_ERR_RSA_BAD_INPUT_DATA;  in mbedtls_rsa_gen_key()
1151     if (ret != 0) {  in mbedtls_rsa_gen_key()
1154         if ((-ret & ~0x7f) == 0) {  in mbedtls_rsa_gen_key()
1155             ret = MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_KEY_GEN_FAILED, ret);  in mbedtls_rsa_gen_key()
1157         return ret;  in mbedtls_rsa_gen_key()
1238     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_public()  local
1249     if ((ret = mbedtls_mutex_lock(&ctx->mutex)) != 0) {  in mbedtls_rsa_public()
1250         return ret;  in mbedtls_rsa_public()
1257         ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;  in mbedtls_rsa_public()
1274     if (ret != 0) {  in mbedtls_rsa_public()
1275         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_PUBLIC_FAILED, ret);  in mbedtls_rsa_public()
1290     int ret, count = 0;  in rsa_prepare_blinding()  local
1308             ret = MBEDTLS_ERR_RSA_RNG_FAILED;  in rsa_prepare_blinding()
1323         ret = mbedtls_mpi_inv_mod(&ctx->Vi, &ctx->Vi, &ctx->N);  in rsa_prepare_blinding()
1324         if (ret != 0 && ret != MBEDTLS_ERR_MPI_NOT_ACCEPTABLE) {  in rsa_prepare_blinding()
1328     } while (ret == MBEDTLS_ERR_MPI_NOT_ACCEPTABLE);  in rsa_prepare_blinding()
1342     return ret;  in rsa_prepare_blinding()
1351     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in rsa_unblind()  local
1381     return ret;  in rsa_unblind()
1414     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_private()  local
1450     if ((ret = mbedtls_mutex_lock(&ctx->mutex)) != 0) {  in mbedtls_rsa_private()
1451         return ret;  in mbedtls_rsa_private()
1480         ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;  in mbedtls_rsa_private()
1560         ret = MBEDTLS_ERR_RSA_VERIFY_FAILED;  in mbedtls_rsa_private()
1600     if (ret != 0 && ret >= -0x007f) {  in mbedtls_rsa_private()
1601         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_PRIVATE_FAILED, ret);  in mbedtls_rsa_private()
1604     return ret;  in mbedtls_rsa_private()
1625     int ret = 0;  in mgf_mask()  local
1636     if ((ret = mbedtls_md_setup(&md_ctx, md_info, 0)) != 0) {  in mgf_mask()
1654         if ((ret = mbedtls_md_starts(&md_ctx)) != 0) {  in mgf_mask()
1657         if ((ret = mbedtls_md_update(&md_ctx, src, slen)) != 0) {  in mgf_mask()
1660         if ((ret = mbedtls_md_update(&md_ctx, counter, 4)) != 0) {  in mgf_mask()
1663         if ((ret = mbedtls_md_finish(&md_ctx, mask)) != 0) {  in mgf_mask()
1680     return ret;  in mgf_mask()
1700     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in hash_mprime()  local
1708     if ((ret = mbedtls_md_setup(&md_ctx, md_info, 0)) != 0) {  in hash_mprime()
1711     if ((ret = mbedtls_md_starts(&md_ctx)) != 0) {  in hash_mprime()
1714     if ((ret = mbedtls_md_update(&md_ctx, zeros, sizeof(zeros))) != 0) {  in hash_mprime()
1717     if ((ret = mbedtls_md_update(&md_ctx, hash, hlen)) != 0) {  in hash_mprime()
1720     if ((ret = mbedtls_md_update(&md_ctx, salt, slen)) != 0) {  in hash_mprime()
1723     if ((ret = mbedtls_md_finish(&md_ctx, out)) != 0) {  in hash_mprime()
1730     return ret;  in hash_mprime()
1769     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_oaep_encrypt()  local
1794     if ((ret = f_rng(p_rng, p, hlen)) != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1795         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in mbedtls_rsa_rsaes_oaep_encrypt()
1801     ret = compute_hash((mbedtls_md_type_t) ctx->hash_id, label, label_len, p);  in mbedtls_rsa_rsaes_oaep_encrypt()
1802     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_encrypt()
1803         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1813     if ((ret = mgf_mask(output + hlen + 1, olen - hlen - 1, output + 1, hlen,  in mbedtls_rsa_rsaes_oaep_encrypt()
1815         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1819     if ((ret = mgf_mask(output + 1, hlen, output + hlen + 1, olen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_encrypt()
1821         return ret;  in mbedtls_rsa_rsaes_oaep_encrypt()
1839     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()  local
1863             ret = f_rng(p_rng, p, 1);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1864         } while (*p == 0 && --rng_dl && ret == 0);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1867         if (rng_dl == 0 || ret != 0) {  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1868             return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in mbedtls_rsa_rsaes_pkcs1_v15_encrypt()
1924     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_oaep_decrypt()  local
1958     ret = mbedtls_rsa_private(ctx, f_rng, p_rng, input, buf);  in mbedtls_rsa_rsaes_oaep_decrypt()
1960     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
1968     if ((ret = mgf_mask(buf + 1, hlen, buf + hlen + 1, ilen - hlen - 1,  in mbedtls_rsa_rsaes_oaep_decrypt()
1971         (ret = mgf_mask(buf + hlen + 1, ilen - hlen - 1, buf + 1, hlen,  in mbedtls_rsa_rsaes_oaep_decrypt()
1977     ret = compute_hash((mbedtls_md_type_t) ctx->hash_id,  in mbedtls_rsa_rsaes_oaep_decrypt()
1979     if (ret != 0) {  in mbedtls_rsa_rsaes_oaep_decrypt()
2015         ret = MBEDTLS_ERR_RSA_INVALID_PADDING;  in mbedtls_rsa_rsaes_oaep_decrypt()
2020         ret = MBEDTLS_ERR_RSA_OUTPUT_TOO_LARGE;  in mbedtls_rsa_rsaes_oaep_decrypt()
2028     ret = 0;  in mbedtls_rsa_rsaes_oaep_decrypt()
2034     return ret;  in mbedtls_rsa_rsaes_oaep_decrypt()
2050     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()  local
2064     ret = mbedtls_rsa_private(ctx, f_rng, p_rng, input, buf);  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2066     if (ret != 0) {  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2070     ret = mbedtls_ct_rsaes_pkcs1_v15_unpadding(buf, ilen,  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2076     return ret;  in mbedtls_rsa_rsaes_pkcs1_v15_decrypt()
2124     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in rsa_rsassa_pss_sign_no_mode_check()  local
2190     if ((ret = f_rng(p_rng, salt, slen)) != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2191         return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_RSA_RNG_FAILED, ret);  in rsa_rsassa_pss_sign_no_mode_check()
2197     ret = hash_mprime(hash, hashlen, salt, slen, p, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2198     if (ret != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2199         return ret;  in rsa_rsassa_pss_sign_no_mode_check()
2208     ret = mgf_mask(sig + offset, olen - hlen - 1 - offset, p, hlen, hash_id);  in rsa_rsassa_pss_sign_no_mode_check()
2209     if (ret != 0) {  in rsa_rsassa_pss_sign_no_mode_check()
2210         return ret;  in rsa_rsassa_pss_sign_no_mode_check()
2434     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()  local
2449     if ((ret = rsa_rsassa_pkcs1_v15_encode(md_alg, hashlen, hash,  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2451         return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2475         ret = MBEDTLS_ERR_RSA_PRIVATE_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2485     if (ret != 0) {  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2488     return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_sign()
2537     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_rsassa_pss_verify_ext()  local
2556     ret = mbedtls_rsa_public(ctx, sig, buf);  in mbedtls_rsa_rsassa_pss_verify_ext()
2558     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2559         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2605     ret = mgf_mask(p, siglen - hlen - 1, hash_start, hlen, mgf1_hash_id);  in mbedtls_rsa_rsassa_pss_verify_ext()
2606     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2607         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2630     ret = hash_mprime(hash, hashlen, p, observed_salt_len,  in mbedtls_rsa_rsassa_pss_verify_ext()
2632     if (ret != 0) {  in mbedtls_rsa_rsassa_pss_verify_ext()
2633         return ret;  in mbedtls_rsa_rsassa_pss_verify_ext()
2680     int ret = 0;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()  local
2696         ret = MBEDTLS_ERR_MPI_ALLOC_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2700     if ((ret = rsa_rsassa_pkcs1_v15_encode(md_alg, hashlen, hash, sig_len,  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2709     ret = mbedtls_rsa_public(ctx, sig, encoded);  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2710     if (ret != 0) {  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2718     if ((ret = mbedtls_ct_memcmp(encoded, encoded_expected,  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2720         ret = MBEDTLS_ERR_RSA_VERIFY_FAILED;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2734     return ret;  in mbedtls_rsa_rsassa_pkcs1_v15_verify()
2774     int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;  in mbedtls_rsa_copy()  local
2802     if (ret != 0) {  in mbedtls_rsa_copy()
2806     return ret;  in mbedtls_rsa_copy()
2918     int ret = 0;  in mbedtls_rsa_self_test()  local
2957         ret = 1;  in mbedtls_rsa_self_test()
2974         ret = 1;  in mbedtls_rsa_self_test()
2989         ret = 1;  in mbedtls_rsa_self_test()
2998         ret = 1;  in mbedtls_rsa_self_test()
3027         ret = 1;  in mbedtls_rsa_self_test()
3041         ret = 1;  in mbedtls_rsa_self_test()
3060     return ret;  in mbedtls_rsa_self_test()