Any suggestions? PKCS #1 doesn't really put any restrictions on what's acceptable. OpenSSL will happily generate you even a 1-bit RSA key in more recent versions :-/