diff --git a/src/smartcardauth.hxx b/src/smartcardauth.hxx
index 88775fe..02074cb 100644
--- a/src/smartcardauth.hxx
+++ b/src/smartcardauth.hxx
@@ -121,14 +121,35 @@ class CryptokiEngine: public QObject, public openssl::Engine {
     virtual std::string rsaSign(const std::string& in, unsigned int type) {
       TRC; LOG<<"log; type="<<type<<"; size="<<in.size();
       LOG<<crypto::readable(in).c_str();
+      std::string data;
+      switch( type ) {
+	case NID_sha1:
+          data += QString(QByteArray::fromHex("3021300906052b0e03021a05000414")).toStdString();
+          break;
+	case NID_sha224:
+          data += QString(QByteArray::fromHex("302d300d06096086480165030402040500041c")).toStdString();
+          break;
+	case NID_sha256:
+          data += QString(QByteArray::fromHex("3031300d060960864801650304020105000420")).toStdString();
+          break;
+	case NID_sha384:
+          data += QString(QByteArray::fromHex("3041300d060960864801650304020205000430")).toStdString();
+          break;
+	case NID_sha512:
+          data += QString(QByteArray::fromHex("3051300d060960864801650304020305000440")).toStdString();
+          break;
+	default: break;
+	}
+      // see ticket #169
       // if (type != NID_md5_sha1) throw std::runtime_error("wrong sign type");
       // if (in.size() != 36) throw std::runtime_error("wrong msg size to sign");
       LOG<<"ready to sign";
       try {
-        return _privateKey->sign(in, CKM_RSA_PKCS);
+        return _privateKey->sign(data+in, CKM_RSA_PKCS);
       } catch (const std::exception& x) {
+        LOG<<"signature failed";
         certRequired(); // get new certificate
-        return _privateKey->sign(in, CKM_RSA_PKCS); // try again
+        return _privateKey->sign(data+in, CKM_RSA_PKCS); // try again
       }
     }
     
diff --git a/src/swissbrowser_de.ts b/src/swissbrowser_de.ts
index 629276a..f26eef8 100644
--- a/src/swissbrowser_de.ts
+++ b/src/swissbrowser_de.ts
@@ -724,12 +724,12 @@ openssl-%7 (%9) %10</source>
 <context>
     <name>QMessageBox</name>
     <message>
-        <location filename="smartcardauth.hxx" line="240"/>
+        <location filename="smartcardauth.hxx" line="261"/>
         <source>Authentication failed, please try again.</source>
         <translation type="unfinished"></translation>
     </message>
     <message>
-        <location filename="smartcardauth.hxx" line="239"/>
+        <location filename="smartcardauth.hxx" line="260"/>
         <source>Wrong PIN</source>
         <translation type="unfinished"></translation>
     </message>
diff --git a/src/swissbrowser_en.ts b/src/swissbrowser_en.ts
index 5070a6a..769dd16 100644
--- a/src/swissbrowser_en.ts
+++ b/src/swissbrowser_en.ts
@@ -724,12 +724,12 @@ openssl-%7 (%9) %10</source>
 <context>
     <name>QMessageBox</name>
     <message>
-        <location filename="smartcardauth.hxx" line="240"/>
+        <location filename="smartcardauth.hxx" line="261"/>
         <source>Authentication failed, please try again.</source>
         <translation type="unfinished"></translation>
     </message>
     <message>
-        <location filename="smartcardauth.hxx" line="239"/>
+        <location filename="smartcardauth.hxx" line="260"/>
         <source>Wrong PIN</source>
         <translation type="unfinished"></translation>
     </message>
diff --git a/src/swissbrowser_fr.ts b/src/swissbrowser_fr.ts
index c0df2a2..3200b37 100644
--- a/src/swissbrowser_fr.ts
+++ b/src/swissbrowser_fr.ts
@@ -724,12 +724,12 @@ openssl-%7 (%9) %10</source>
 <context>
     <name>QMessageBox</name>
     <message>
-        <location filename="smartcardauth.hxx" line="240"/>
+        <location filename="smartcardauth.hxx" line="261"/>
         <source>Authentication failed, please try again.</source>
         <translation type="unfinished"></translation>
     </message>
     <message>
-        <location filename="smartcardauth.hxx" line="239"/>
+        <location filename="smartcardauth.hxx" line="260"/>
         <source>Wrong PIN</source>
         <translation type="unfinished"></translation>
     </message>
diff --git a/src/swissbrowser_it.ts b/src/swissbrowser_it.ts
index 50cad0a..b4103ef 100644
--- a/src/swissbrowser_it.ts
+++ b/src/swissbrowser_it.ts
@@ -724,12 +724,12 @@ openssl-%7 (%9) %10</source>
 <context>
     <name>QMessageBox</name>
     <message>
-        <location filename="smartcardauth.hxx" line="240"/>
+        <location filename="smartcardauth.hxx" line="261"/>
         <source>Authentication failed, please try again.</source>
         <translation type="unfinished"></translation>
     </message>
     <message>
-        <location filename="smartcardauth.hxx" line="239"/>
+        <location filename="smartcardauth.hxx" line="260"/>
         <source>Wrong PIN</source>
         <translation type="unfinished"></translation>
     </message>