diff --git a/library/rsa.c b/library/rsa.c
index 4958cad..0be5b0a 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1812,8 +1812,6 @@
                         hashlen == 0 ) ||
                       hash != NULL );
     RSA_VALIDATE_RET( sig != NULL );
-    RSA_VALIDATE_RET( saltlen == MBEDTLS_RSA_SALT_LEN_ANY ||
-                      saltlen > 0 );
 
     if( mode == MBEDTLS_RSA_PRIVATE && ctx->padding != MBEDTLS_RSA_PKCS_V21 )
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
@@ -1856,7 +1854,7 @@
         else
             slen = olen - hlen - 2;
     }
-    else if ( (saltlen < 0) || ((size_t) saltlen > olen - hlen - 2) )
+    else if ( (saltlen < 0) || (saltlen + hlen + 2 > olen) )
     {
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
     }