diff 3ce0347ef33d00b70573faca983f44c07b323b0e uncommitted
--- a/sys/src/cmd/auth/factotum/rsa.c
+++ b/sys/src/cmd/auth/factotum/rsa.c
@@ -10,6 +10,7 @@
  * all numbers are hexadecimal biginits parsable with strtomp.
  *
  * Sign (PKCS #1 using hash=sha1 or hash=md5)
+ *	read public key (optional)
  *	write hash(msg)
  *	read signature(hash(msg))
  *
@@ -138,6 +139,7 @@
 	default:
 		return phaseerror(fss, "read");
 	case CHavePub:
+	case SNeedHash:
 		do {
 			if(s->key){
 				closekey(s->key);