diff --git a/library/rsa.c b/library/rsa.c
index b250e1d491..c8ea980e07 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -107,12 +107,9 @@ int mbedtls_rsa_parse_key(mbedtls_rsa_context *rsa, const unsigned char *key, si
         return ret;
     }
 
+    /* mbedtls_asn1_get_tag() already ensures that len is valid (i.e. p+len <= end)*/
     end = p + len;
 
-    if (end > (key + keylen)) {
-        return MBEDTLS_ERR_ASN1_LENGTH_MISMATCH;
-    }
-
     if ((ret = mbedtls_asn1_get_int(&p, end, &version)) != 0) {
         return ret;
     }
@@ -243,12 +240,9 @@ int mbedtls_rsa_parse_pubkey(mbedtls_rsa_context *rsa, const unsigned char *key,
         return ret;
     }
 
+    /* mbedtls_asn1_get_tag() already ensures that len is valid (i.e. p+len <= end)*/
     end = p + len;
 
-    if (end > (key + keylen)) {
-        return MBEDTLS_ERR_ASN1_LENGTH_MISMATCH;
-    }
-
     /* Import N */
     if ((ret = mbedtls_asn1_get_tag(&p, end, &len, MBEDTLS_ASN1_INTEGER)) != 0) {
         return ret;