diff c1d40df49550393f3afe53fb6e6d500dfa8eb7a8 uncommitted
--- a/sys/src/cmd/auth/factotum/rsa.c
+++ b/sys/src/cmd/auth/factotum/rsa.c
@@ -10,10 +10,12 @@
  * all numbers are hexadecimal biginits parsable with strtomp.
  *
  * Sign (PKCS #1 using hash=sha1 or hash=md5)
+ *	read public key (optional)
  *	write hash(msg)
  *	read signature(hash(msg))
  *
  * Verify:
+ *	read public key (optional)
  *	write hash(msg)
  *	write signature(hash(msg))
  *	read ok or fail
@@ -151,6 +153,8 @@
 			s->off++;
 			/* need private key */
 		} while(s->key->privattr == nil);
+	case SNeedHash:
+	case VNeedHash:
 		priv = s->key->priv;
 		*n = snprint(va, *n, "%B %B", priv->pub.n, priv->pub.ek);
 		return RpcOk;