Index: b/agent/pksign.c =================================================================== --- b/agent/pksign.c +++ b/agent/pksign.c @@ -199,7 +199,7 @@ * ECDSA 521 as the only hash that matches it is SHA 512, but 512 < * 521 ). */ - if (mdlen < ((pkalgo==GCRY_PK_ECDSA && qbits > 521) ? 512 : qbits)/8) + if (mdlen < ((pkalgo==GCRY_PK_ECDSA && qbits > 512) ? 512 : qbits)/8) { log_error (_("a %zu bit hash is not valid for a %u bit %s key\n"), mdlen*8,