maireland

Thank you. I realized that there is a cut/paste error in my original post. The excerpt showing step 4 in PKCS #1 v2.2 didn't paste correctly, but it looks like...

There has been no resolution to the issue yet as far as I know so I'd like to keep it open.

Thank you for the update, Chris.

Our implementation only supports RSA-2048 using SHA-256 for message digest. So, the implementation retrieves the recovered 256-bit hash from a fixed location at the end of EM. We don’t use...

That is correct, only the last 256-bits of the hash would be taken in that case.