gpgsm: Support verification of nistp521 signatures.

* sm/certcheck.c (do_encode_md): Take care of nistp521.

This curve is a bit odd in that it does not match a common hash digest
length. We fix that here for just this case instead of writing more
general code to support all allowed cases (i.e. hash shorter than Q).

Backported-from-master: 596212e71abf33b30608348b782c093dace83110

• Signed-off-by: Werner Koch <wk@gnupg.org>