2 - Rethink and possibly add verification of output buffer lengths.
3 In other words check whether the user won't cause a buffer overflow.
4 - Importing/exporting encrypted (passphrased) RSA keys
5 - What about importing RSA priv and generating PUB from it?