Enforce strict RSA key length checking in existing RSA crypto constructors, add new legacy constructor to permit keys shorter than 2018 bits

[Former user]

Chapter 3.3 and 3.5 of the JWA specification require RSA keys to have a length of at least 2048 bit.

This requirement is currently not enforced by the library. I attached a test case that illustrates the behaviour.

[Vladimir Dzhuvinov]

That's true, we've had developers who insisted on support 1024 bit RSA keys for various reasons.

I'm thinking of adding a second 'legacy' constructor to permit shorter keys, while making the original constructor strict (require 2048+ bits).

[Vladimir Dzhuvinov]

Legacy apps still need to be able to work with RSA keys shorter than 2048 bits.

[Vladimir Dzhuvinov]

Addressed in b3c700b44955c982c653e18f67964f6278a1e60f

To be released in 6.1