make rsa check boundary

1 files changed, 7 insertions, 1 deletions

diff --git a/flags.go b/flags.go
index d7dc2ef..346486c 100644
--- a/flags.go
+++ b/flags.go
@@ -161,7 +161,13 @@ func (f *Flags) parsePrivateKeyGenerationFlags() error {
     case 521: f.Flags.PrivateKeyGenerationFlags.Curve = elliptic.P521()
     default: return fmt.Errorf("Curve %d unknown!", f.flag_container.length)
     }
-  case "rsa": f.Flags.PrivateKeyGenerationFlags.Size = f.flag_container.length
+  case "rsa":
+    size := f.flag_container.length
+    if RsaLowerLength <= size && size <= RsaUpperLength {
+      f.Flags.PrivateKeyGenerationFlags.Size = size
+    } else {
+      return fmt.Errorf("Length of %d is not allowed for rsa!", size)
+    }
   default: return fmt.Errorf("Type %s is unknown!", pk_type)
   }
   return nil