agessh: reject small ssh-rsa keys

Fixes #266
FiloSottile · May 24, 2021 · fb293ef · fb293ef
1 parent 3d5b49a
commit fb293ef
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/agessh/agessh.go b/agessh/agessh.go
@@ -65,6 +65,9 @@ func NewRSARecipient(pk ssh.PublicKey) (*RSARecipient, error) {
 	} else {
 		return nil, errors.New("pk does not implement ssh.CryptoPublicKey")
 	}
+	if r.pubKey.Size() < 2048/8 {
+		return nil, errors.New("RSA key size is too small")
+	}
 	return r, nil
 }