kn_sign_assertion
sig = kn_sign_assertion(buf, buflen, buf2, algname, flg);
char *kn_sign_assertion(char *, int, char *, char *, int);