c54f66acb4
Callers of this function always pad up to `CB_PIN_MAX` with `0xFF`. The logic being changed here was previously identical to the `_verify` function in `ykpiv.c`: https://github.com/Yubico/yubico-piv-tool/blob/8ba243f/lib/ykpiv.c#L1299 ...but @str4d noticed this potentially allows a caller to send an unpadded PIN, which may (or may not) be an issue.