some checks for PKCS1 keys being too small for the payload to be signed