> aka NSS

Or we could get iOS over to BoringSSL which would be much much preferable I think.

So we forked part of the NSS code for handling RSA-PSS in //crypto (c.f. //src/crypto/third_party/nss/rsawrapr.c) so that we can verify RSA-PSS signatures.

If converting iOS to BoringSSL doesn't look like something we can achieve in the M-51 timeframe, we can extend that to have the SignatureCreatorNSS support generating PSS signatures by forking more of the code.

I'm tentatively assigning this to Steven to allow him to get a feel for the conversion risks; if it looks like BoringSSL-ifying things may be more complex, this can be low-hanging fruit that can be done in a day or two.

Marking WontFix, since svaldez@ got the change to BoringSSL in to M-51 even though NSS added supported in M-50.