From 6cb61986091eed99e7dcf259fa8362842cbde5ca Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Fri, 14 Aug 2026 14:29:54 +0200
Subject: [PATCH] Enforce RSA size in imported algorithm attributes

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/openpgp/cmd_import_data.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/openpgp/cmd_import_data.c b/src/openpgp/cmd_import_data.c
index 4b5fa27..08a0442 100644
--- a/src/openpgp/cmd_import_data.c
+++ b/src/openpgp/cmd_import_data.c
@@ -182,6 +182,10 @@ int cmd_import_data(void) {
             mbedtls_rsa_free(&rsa);
             return SW_EXEC_ERROR();
         }
+        if ((size_t)mbedtls_rsa_get_len(&rsa) * 8u != (size_t)((algo[1] << 8) | algo[2])) {
+            mbedtls_rsa_free(&rsa);
+            return SW_WRONG_DATA();
+        }
         make_rsa_response(&rsa);
         r = store_keypair(&rsa, ALGO_RSA, fid, res_APDU, res_APDU_size);
         mbedtls_rsa_free(&rsa);