In the default configuration, if you have an mbedtls_pk_context of type MBEDTLS_PK_RSA, and the underlying RSA context has its padding mode set to MBEDTLS_RSA_PKCS_V21, then the functions mbedtls_pk_sign, mbedtls_pk_verify, mbedtls_pk_encrypt and mbedtls_pk_decrypt perform PSS or OAEP....