OpenSSL allows (by virtue of doing nothing to check for) composite p and&#x2F;or q for RSA keys. Is there something here beyond &quot;if you use parameters from an untrusted source you might have a bad time&quot;?