dr8/yubico-pam — comment on commit 9e7746bc53957f2a1e68784c0c26d082049180a7
File:  line 0
By dr8:

Bug fix: pam_yubico did not use the client key to validate the server HMAC signature, allowing for various attacks.

With this fix, pam_yubico will validate the server responses using the HMAC signature, if a key is given, and reject server responses with the wrong signature, but will allow any signature if a key is not given.

This commit tidys up the code.