in src/rsa_support.c [143:167]
int PKCS15(int sha,const octet *m,octet *w)
{
int olen=w->max;
int hlen=sha;
int idlen=19;
char h[64];
octet H= {0,sizeof(h),h};
if (olen<idlen+hlen+10) return 1;
hashit(sha,m,-1,&H);
OCT_empty(w);
OCT_jbyte(w,0x00,1);
OCT_jbyte(w,0x01,1);
OCT_jbyte(w,0xff,olen-idlen-hlen-3);
OCT_jbyte(w,0x00,1);
if (hlen==32) OCT_jbytes(w,(char *)SHA256ID,idlen);
if (hlen==48) OCT_jbytes(w,(char *)SHA384ID,idlen);
if (hlen==64) OCT_jbytes(w,(char *)SHA512ID,idlen);
OCT_joctet(w,&H);
return 0;
}