From 46455168a2d1021ca25e0b8d19061784a6ff55df Mon Sep 17 00:00:00 2001
From: Alessio Di Mauro <alessio@yubico.com>
Date: Fri, 6 Nov 2015 16:09:02 +0100
Subject: [PATCH] YKCS11: print out signature related data only if debug is
 enabled.

---
 ykcs11/ykcs11.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/ykcs11/ykcs11.c b/ykcs11/ykcs11.c
index 9b6bf51..739df2b 100644
--- a/ykcs11/ykcs11.c
+++ b/ykcs11/ykcs11.c
@@ -1784,7 +1784,9 @@ CK_DEFINE_FUNCTION(CK_RV, C_Sign)(
   }
 
   DBG("Sending %lu bytes to sign", ulDataLen);
+#if YKCS11_DBG == 1
   dump_hex(pData, ulDataLen, stderr, CK_TRUE);
+#endif
 
   if (is_hashed_mechanism(op_info.mechanism.mechanism) == CK_TRUE) {
     if (apply_sign_mechanism_update(&op_info, pData, ulDataLen) != CKR_OK) {
@@ -1824,7 +1826,9 @@ CK_DEFINE_FUNCTION(CK_RV, C_Sign)(
 
   DBG("Using key %lx", op_info.op.sign.key_id);
   DBG("After padding and transformation there are %lu bytes", op_info.buf_len);
+#if YKCS11_DBG == 1
   dump_hex(op_info.buf, op_info.buf_len, stderr, CK_TRUE);
+#endif
 
   *pulSignatureLen = sizeof(op_info.buf);
 
@@ -1843,7 +1847,9 @@ CK_DEFINE_FUNCTION(CK_RV, C_Sign)(
   }
 
   DBG("Got %lu bytes back", *pulSignatureLen);
+#if YKCS11_DBG == 1
   dump_hex(pSignature, *pulSignatureLen, stderr, CK_TRUE);
+#endif
 
   if (!is_RSA_mechanism(op_info.mechanism.mechanism)) {
     // ECDSA, we must remove the DER encoding and only return R,S
@@ -1851,7 +1857,9 @@ CK_DEFINE_FUNCTION(CK_RV, C_Sign)(
     strip_DER_encoding_from_ECSIG(pSignature, pulSignatureLen);
 
     DBG("After removing DER encoding %lu", *pulSignatureLen);
+#if YKCS11_DBG == 1
     dump_hex(pSignature, *pulSignatureLen, stderr, CK_TRUE);
+#endif
   }
 
   op_info.type = YKCS11_NOOP;