The virtio-crypto spec does not dictate a maximum length limit for 
asymmetric cipher (akcipher) keys. We added a hard limit which mirrors
the linux kernels's internal limit for akcipher keys (see 
keyctl framework and the add_key syscall).
Maybe we should update the virtio-spec and add a max_akcipher_key_len
field for virtio crypto devices.

v2:
  - dropped the hardcoded limit mirroring the linux kernel.
  - enforced the global max_size boundary specifically for akcipher
    session creation

helei (1):
  hw/virtio-crypto: enforce max akcipher key length

 hw/virtio/virtio-crypto.c | 6 ++++++
 1 file changed, 6 insertions(+)

-- 
2.43.0