diff --git a/library/rsa.c b/library/rsa.c
index 16114ac..e9ada0e 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -851,6 +851,9 @@
         bad |= *p++; /* Must be zero */
     }
 
+    if( pad_count < 8 )
+        return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
+
     if( bad )
         return( POLARSSL_ERR_RSA_INVALID_PADDING );