Correct, they are tests for the behavior of the backend.

The fact that `RSAPrivateKey` and `RSAPublicKey` actually do the validation is an implementation detail.