From fccced4935de0c7022032fb5660e39db7f0531a0 Mon Sep 17 00:00:00 2001
From: Josh Holtrop <josh@wolfssl.com>
Date: Mon, 20 Apr 2026 08:57:41 -0400
Subject: [PATCH] Rust wrapper: verify RSA lengths in verifying_key()

---
 wrapper/rust/wolfssl-wolfcrypt/src/rsa_pkcs1v15.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/wrapper/rust/wolfssl-wolfcrypt/src/rsa_pkcs1v15.rs b/wrapper/rust/wolfssl-wolfcrypt/src/rsa_pkcs1v15.rs
index 1effa323c9..c20d2a3e26 100644
--- a/wrapper/rust/wolfssl-wolfcrypt/src/rsa_pkcs1v15.rs
+++ b/wrapper/rust/wolfssl-wolfcrypt/src/rsa_pkcs1v15.rs
@@ -336,6 +336,9 @@ impl<H: Hash, const N: usize> Keypair for SigningKey<H, N> {
         if rc != 0 {
             panic!("wc_RsaFlattenPublicKey failed: {rc}");
         }
+        if (n_len as usize) != N || e_len == 0 || (e_len as usize) > MAX_E_LEN {
+            panic!("wc_RsaFlattenPublicKey failed: e_len: {e_len}, n_len: {n_len}");
+        }
         VerifyingKey {
             n,
             e,