@@ -234,6 +234,22 @@ pub const PSS_SHA1_HASH_ALG: AlgorithmIdentifier<'_> = AlgorithmIdentifier {
234
234
params : AlgorithmParameters :: Sha1 ( Some ( ( ) ) ) ,
235
235
} ;
236
236
237
+ // RSA-PSS ASN.1 hash algorithm definitions specified under the CA/B Forum BRs.
238
+ pub const PSS_SHA256_HASH_ALG : AlgorithmIdentifier < ' _ > = AlgorithmIdentifier {
239
+ oid : asn1:: DefinedByMarker :: marker ( ) ,
240
+ params : AlgorithmParameters :: Sha256 ( Some ( ( ) ) ) ,
241
+ } ;
242
+
243
+ pub const PSS_SHA384_HASH_ALG : AlgorithmIdentifier < ' _ > = AlgorithmIdentifier {
244
+ oid : asn1:: DefinedByMarker :: marker ( ) ,
245
+ params : AlgorithmParameters :: Sha384 ( Some ( ( ) ) ) ,
246
+ } ;
247
+
248
+ pub const PSS_SHA512_HASH_ALG : AlgorithmIdentifier < ' _ > = AlgorithmIdentifier {
249
+ oid : asn1:: DefinedByMarker :: marker ( ) ,
250
+ params : AlgorithmParameters :: Sha512 ( Some ( ( ) ) ) ,
251
+ } ;
252
+
237
253
// This is defined as an AlgorithmIdentifier in RFC 4055,
238
254
// but the mask generation algorithm **must** contain an AlgorithmIdentifier
239
255
// in its params, so we define it this way.
@@ -249,6 +265,22 @@ pub const PSS_SHA1_MASK_GEN_ALG: MaskGenAlgorithm<'_> = MaskGenAlgorithm {
249
265
params : PSS_SHA1_HASH_ALG ,
250
266
} ;
251
267
268
+ // RSA-PSS ASN.1 mask gen algorithms defined under the CA/B Forum BRs.
269
+ pub const PSS_SHA256_MASK_GEN_ALG : MaskGenAlgorithm < ' _ > = MaskGenAlgorithm {
270
+ oid : oid:: MGF1_OID ,
271
+ params : PSS_SHA256_HASH_ALG ,
272
+ } ;
273
+
274
+ pub const PSS_SHA384_MASK_GEN_ALG : MaskGenAlgorithm < ' _ > = MaskGenAlgorithm {
275
+ oid : oid:: MGF1_OID ,
276
+ params : PSS_SHA384_HASH_ALG ,
277
+ } ;
278
+
279
+ pub const PSS_SHA512_MASK_GEN_ALG : MaskGenAlgorithm < ' _ > = MaskGenAlgorithm {
280
+ oid : oid:: MGF1_OID ,
281
+ params : PSS_SHA512_HASH_ALG ,
282
+ } ;
283
+
252
284
// From RFC 4055 section 3.1:
253
285
// RSASSA-PSS-params ::= SEQUENCE {
254
286
// hashAlgorithm [0] HashAlgorithm DEFAULT
0 commit comments