|  | This is the same as rsa-pss-sha256.pem, except the signature was generated | 
|  | with a salt length of 33 instead of 32, while the algorithm still reports | 
|  | the standard value of 32. | 
|  |  | 
|  | The public key in SPKI form: | 
|  | $ openssl pkey -in key.pem -pubout | 
|  | -----BEGIN PUBLIC KEY----- | 
|  | MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56hwS55y9JG5gXkTQLX | 
|  | m/Q4HSJdP/kECgztMMQtqgiv+QdL0J5M7bQNbUK7ZhZt5pES5T0HjJcIENBvhXFz | 
|  | UZ3rBOMp4yESFLWoSL0quL0DAaRX/ZuZqT+Ow6LPdkwlv1JpKh03ylqxCGbw1bIF | 
|  | IEsFrp6QDndSPVI1ifd2QfYe+fdRQuF8emaGu50OKRSgziQB50JHKD0zRsh1cgUc | 
|  | QTyGUiFj2ndFXw1APzylU2+ouYurmN3ZCrvcP2J/qgQdAzDYRQ/bq/v7LNYQc+Gu | 
|  | d+EIzE3+9spybnWRi2aLrnGwwBCZs/bqc66waK0pzH8z/mDwbB2ZSIal6ARF0iWU | 
|  | XQIDAQAB | 
|  | -----END PUBLIC KEY----- | 
|  |  | 
|  | The signing algorithm: | 
|  |  | 
|  | $ openssl asn1parse -i < [ALGORITHM] | 
|  | 0:d=0  hl=2 l=  65 cons: SEQUENCE | 
|  | 2:d=1  hl=2 l=   9 prim:  OBJECT            :rsassaPss | 
|  | 13:d=1  hl=2 l=  52 cons:  SEQUENCE | 
|  | 15:d=2  hl=2 l=  15 cons:   cont [ 0 ] | 
|  | 17:d=3  hl=2 l=  13 cons:    SEQUENCE | 
|  | 19:d=4  hl=2 l=   9 prim:     OBJECT            :sha256 | 
|  | 30:d=4  hl=2 l=   0 prim:     NULL | 
|  | 32:d=2  hl=2 l=  28 cons:   cont [ 1 ] | 
|  | 34:d=3  hl=2 l=  26 cons:    SEQUENCE | 
|  | 36:d=4  hl=2 l=   9 prim:     OBJECT            :mgf1 | 
|  | 47:d=4  hl=2 l=  13 cons:     SEQUENCE | 
|  | 49:d=5  hl=2 l=   9 prim:      OBJECT            :sha256 | 
|  | 60:d=5  hl=2 l=   0 prim:      NULL | 
|  | 62:d=2  hl=2 l=   3 cons:   cont [ 2 ] | 
|  | 64:d=3  hl=2 l=   1 prim:    INTEGER           :20 | 
|  | -----BEGIN ALGORITHM----- | 
|  | MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIBBQChHDAaBgkqhkiG9w0BAQgw | 
|  | DQYJYIZIAWUDBAIBBQCiAwIBIA== | 
|  | -----END ALGORITHM----- | 
|  |  | 
|  | -----BEGIN DATA----- | 
|  | x/UnD8pyX5vRn1GajXzKPMXAeQJAKfO65RD5sCFA/iOJCOT2wY8HqJxofIaEZpsfHbK6+SUaPIK | 
|  | frMtJMIThbsnijViGgHSl1iIWZ91uUo0W/iyfPbTPr2xNzoyEOa84zqqqnOLsrnvI9KWlXjv5bf | 
|  | nNV1xPnLMnlRuM3+QIcWg= | 
|  | -----END DATA----- | 
|  |  | 
|  | The signature was generated with: | 
|  | $ openssl dgst -sign key.pem -sha256 -sigopt rsa_padding_mode:pss \ | 
|  | -sigopt rsa_pss_saltlen:33 < [DATA] > [SIGNATURE] | 
|  |  | 
|  | Then the signature was wrapped in a BIT STRING. | 
|  |  | 
|  | $ openssl asn1parse -i < [SIGNATURE] | 
|  | 0:d=0  hl=4 l= 257 prim: BIT STRING | 
|  | -----BEGIN SIGNATURE----- | 
|  | A4IBAQB4R+AnrWUH+TvyBU3yR1GP1ghodbwUZdyJfG1rqzEqpY/MJtsd1YM9bC9q | 
|  | FqHao1+idLj+WSl91hbtZAEtNb0TDdXkO+iattPYsTBAeLm70A7DbqwM7s/1rTp0 | 
|  | KJ4QFOJe05wYO+p/zHZ4Oiyhx2bCx+8J1FLlYEtwR0NhwRwPflVO7TNZC1l40iqk | 
|  | iyxsJrXsibuFnFnBe6BytBdlKF/CHFuve6z5aLauuuQtA17I6YRZ4cdKceD9I3Hs | 
|  | NVhe+V1V10YoMDx3AywQTnaM+Au+VoxHU6oh9KP5lrrzBhPZPDtzfF++4Ag2Vd2O | 
|  | GFvPoL8xTp3S8QG5iVs90BkW8GvL | 
|  | -----END SIGNATURE----- |