      function _checkBadTailingGarbage(publicKey, S) {
        var md = MD.sha256.create();
        md.update(m);

        ASSERT.throws(function() {
          publicKey.verify(md.digest().getBytes(), S);
        }, {
          message: 'Unparsed DER bytes remain after ASN.1 parsing.'
        });
      }
The software does not verify, or incorrectly verifies, the cryptographic signature for data.