Add comments

Signed-off-by: Arthur Chan <[email protected]>

Author: arthurscchan

sigstore-java/src/main/java/dev/sigstore/encryption/Keys.java

@@ -74,6 +74,8 @@ public static PublicKey parsePublicKey(byte[] keyBytes)
       throw new InvalidKeySpecException("Invalid key, could not parse PEM section");
     }
     // special handling for PKCS1 (rsa) public key
+    // TODO: The length checking is not necessary after https://github.com/bcgit/bc-java/issues/1370
+    // has been merged. Remove it when bc-java is updated with the merge.
     if ((section == null) || (section.getContent() == null) || (section.getContent().length == 0)) {
       throw new InvalidKeySpecException("Invalid key, empty PEM section");
     }