Please review this fix to apply stricter length checks when verifying public key signatures. Thanks. Bug: https://bugs.openjdk.java.net/browse/JDK-8161571 Webrev: http://cr.openjdk.java.net/~vinnie/8161571/webrev.00/