test: cover RSA-PSS saltLength default in sign/verify tests

Verify that omitting saltLength with RSA_PKCS1_PSS_PADDING produces a
signature that round-trips both with no explicit saltLength and with
the explicit RSA_PSS_SALTLEN_MAX_SIGN constant.

Author: boorad

example/src/tests/keys/sign_verify_oneshot.ts

@@ -113,6 +113,38 @@ test(SUITE, 'RSA-PSS with padding and salt length options', () => {
   expect(isValid).to.equal(true);
 });
 
+test(SUITE, 'RSA-PSS defaults saltLength to MAX_SIGN when undefined', () => {
+  const signature = sign('SHA256', testData, {
+    key: rsaPrivateKeyPem,
+    padding: constants.RSA_PKCS1_PSS_PADDING,
+  });
+
+  const isValid = verify(
+    'SHA256',
+    testData,
+    {
+      key: rsaPublicKeyPem,
+      padding: constants.RSA_PKCS1_PSS_PADDING,
+    },
+    signature,
+  );
+
+  expect(isValid).to.equal(true);
+
+  const isValidExplicit = verify(
+    'SHA256',
+    testData,
+    {
+      key: rsaPublicKeyPem,
+      padding: constants.RSA_PKCS1_PSS_PADDING,
+      saltLength: constants.RSA_PSS_SALTLEN_MAX_SIGN,
+    },
+    signature,
+  );
+
+  expect(isValidExplicit).to.equal(true);
+});
+
 // --- ECDSA Tests ---
 
 test(SUITE, 'ECDSA P-256 with DER encoding', async () => {

example/src/tests/keys/sign_verify_streaming.ts

@@ -219,6 +219,40 @@ test(SUITE, 'RSA-PSS with SHA256 and auto salt length', () => {
   expect(isValid).to.equal(true);
 });
 
+test(SUITE, 'RSA-PSS defaults saltLength to MAX_SIGN when undefined', () => {
+  const signer = createSign('SHA256');
+  signer.update(testData);
+  const signature = signer.sign({
+    key: rsaPrivateKeyPem,
+    padding: constants.RSA_PKCS1_PSS_PADDING,
+  });
+
+  const verifier = createVerify('SHA256');
+  verifier.update(testData);
+  const isValid = verifier.verify(
+    {
+      key: rsaPublicKeyPem,
+      padding: constants.RSA_PKCS1_PSS_PADDING,
+    },
+    signature,
+  );
+
+  expect(isValid).to.equal(true);
+
+  const verifierExplicit = createVerify('SHA256');
+  verifierExplicit.update(testData);
+  const isValidExplicit = verifierExplicit.verify(
+    {
+      key: rsaPublicKeyPem,
+      padding: constants.RSA_PKCS1_PSS_PADDING,
+      saltLength: constants.RSA_PSS_SALTLEN_MAX_SIGN,
+    },
+    signature,
+  );
+
+  expect(isValidExplicit).to.equal(true);
+});
+
 // --- KeyObject Tests ---
 
 test(SUITE, 'Sign/Verify with KeyObject', () => {