jvm-ibp2p vulnerable to attack using large RSA keys

[scacaca]

Summary

There is no length limit for RSA keys, and a malicious node can exploit large RSA keys to launch a resource exhaustion attack.
A malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key.
there is a similar problem
The relevant codes are in file1(RSA key generation and parsing functions）

Expected behavior

refuse large rsa key

Actual behavior

There is no length limit for RSA keys.

Relevant log output

Possible Solution

The vulnerability can be fixed by restricting the length of RSA keys. it is similar to this.
The fix could be to limit the RSAkeys length.

Version

the latest version

Would you like to work on fixing this bug ?

Yes