Fix OTP decryption and verification

I fixed the OTP decryption/verification making all tests pass again. 

In the yubikey case, padding is not necessary, and should be disabled. As usual, in the end the solution was not really exciting.

Now we can finish switching to OpenSSL and move this nice module forward.