[GNU Crypto] EMSA_PSS.MGF Bug? Version 2.0.1

[TAKIGUCHI Naruhito]

Dear Gnu Crypto developers.

I'm implementing the RSASSA-PSS signature in Java, and testing with 
Gnu Crypto.
But the signature by my implementation does not verify by GNU Crypto.

I have read PKCS#1 v2.1 again, and review GNU Crypto' EMSA_PSS.java.
I doubt this is a bug in GNU Crypto's EM_PSS.java.

    PKCS#1 v2.1 B.2.1 MGF1
    "3. For counter from 0 to [maskLen / hLen] - 1, do the following"
    
    In contract, EMSA_PSS.MGF method (line: 379),
    "for( int i = 0; i < limit; i++ )" .
                     ^^^^^^^^^
    In correctly, "for ( int i = 0; i <= limit; i++ )" ?
                                    ^^^^^^^^^^

Thanks in advance.

---
NARUHITO                    mailto:address@hidden