Note that there are *two* maximum key size checks in the code, and the one in rsa.rs subsumes the one in rsa_impl.c.
ring::rand