33 	size_t u, x3, xlen;  in br_rsa_pkcs1_sig_pad()  local
37 	 *  00 01 FF .. FF 00 30 x1 30 x2 06 x3 OID 05 00 04 x4 HASH  in br_rsa_pkcs1_sig_pad()
48 	 *  -- x3 is equal to the encoded OID value length (hash_oid[0]).  in br_rsa_pkcs1_sig_pad()
50 	 *  -- x2 = x3 + 4.  in br_rsa_pkcs1_sig_pad()
52 	 *  -- x1 = x2 + x4 + 4 = x3 + x4 + 8.  in br_rsa_pkcs1_sig_pad()
60 	xlen = (n_bitlen + 7) >> 3;  in br_rsa_pkcs1_sig_pad()
69 		memset(x + 2, 0xFF, u - 3);  in br_rsa_pkcs1_sig_pad()
72 		x3 = hash_oid[0];  in br_rsa_pkcs1_sig_pad()
78 		if (xlen < (x3 + hash_len + 21)) {  in br_rsa_pkcs1_sig_pad()
83 		u = xlen - x3 - hash_len - 11;  in br_rsa_pkcs1_sig_pad()
87 		x[u + 2] = x3 + hash_len + 8;  in br_rsa_pkcs1_sig_pad()
88 		x[u + 3] = 0x30;  in br_rsa_pkcs1_sig_pad()
89 		x[u + 4] = x3 + 4;  in br_rsa_pkcs1_sig_pad()
91 		memcpy(x + u + 6, hash_oid, x3 + 1);  in br_rsa_pkcs1_sig_pad()
92 		u += x3 + 7;  in br_rsa_pkcs1_sig_pad()