anchor.diff:      Content = build_content(Context, THash),
   
       %% The length of the Salt MUST be equal to the length of the output
  -    %% of the digest algorithm.
  -    PadLen = ssl_cipher:hash_size(HashAlgo),
  -
  +    %% of the digest algorithm: rsa_pss_saltlen = -1
       public_key:sign(Content, HashAlgo, PrivateKey,
                       [{rsa_padding, rsa_pkcs1_pss_padding},
                        {rsa_pss_saltlen, -1},
  
positive.code: 
  %% TODO: use maybe monad for error handling!
  certificate_verify(PrivateKey, SignatureScheme,
                     #state{handshake_env =
                                #handshake_env{
                                   tls_handshake_history = {Messages, _}}}, server) ->
      {HashAlgo, _, _} =
          ssl_cipher:scheme_to_components(SignatureScheme),
  
      Context = lists:reverse(Messages),
      THash = tls_v1:transcript_hash(Context, HashAlgo),
  
      Signature = digitally_sign(THash, <<"TLS 1.3, server CertificateVerify">>,
                                 HashAlgo, PrivateKey),
  
  
negative.code:         State5 = tls_connection:queue_handshake(Certificate, State4),
  
          %% Create CertificateVerify
          CertificateVerify = certificate_verify(CertPrivateKey, SignatureScheme,
                                                 State5, server),
  
  