jvm-ibp2p vulnerable to attack using large RSA keys

Summary

There is no length limit for RSA keys, and a malicious node can exploit large RSA keys to launch a resource exhaustion attack.
A malicious peer can use large RSA keys to run a resource exhaustion attack & force a node to spend time doing signature verification of the large key.
there is a similar problem
The relevant codes are in file1(RSA key generation and parsing functions）

Expected behavior

refuse large rsa key

Actual behavior

There is no length limit for RSA keys.

Relevant log output

Possible Solution

The vulnerability can be fixed by restricting the length of RSA keys. it is similar to this.
The fix could be to limit the RSAkeys length.

Version

the latest version

Would you like to work on fixing this bug ?

Yes

Start in libp2p/src/main/kotlin/io/libp2p/crypto/keys/Rsa.kt, especially the RSA key generation and parsing functions identified in the issue. Review the analogous go-libp2p pull request and the linked advisory to determine the intended key-size restriction. Done means oversized RSA keys are refused without allowing the resource-exhaustion behavior.