Modify the RSA key generation procedure in SunRsaSign so that it is compliant with FIPS 186-4. A relatively simple solution is to use the "guess and check" method described in B.3.3 of this document.