diff --git a/ChangeLog b/ChangeLog
index 47df87cf2..b8a2467ed 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,8 @@
 20030603
  - (djm) Bug #573 - Remove unneeded Krb headers and compat goop. Patch from
    simon@sxw.org.uk (Also matches a change in OpenBSD a while ago)
+ - (djm) Bug #577 - wrong flag in scard-opensc.c sc_private_decrypt. 
+   ok markus@
 
 20030603
  - (djm) Replace setproctitle replacement with code derived from 
@@ -429,4 +431,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.2771 2003/06/04 09:06:59 djm Exp $
+$Id: ChangeLog,v 1.2772 2003/06/04 09:15:10 djm Exp $
diff --git a/scard-opensc.c b/scard-opensc.c
index e91bc25ba..312251829 100644
--- a/scard-opensc.c
+++ b/scard-opensc.c
@@ -173,7 +173,8 @@ sc_private_decrypt(int flen, u_char *from, u_char *to, RSA *rsa,
 	r = sc_prkey_op_init(rsa, &key_obj);
 	if (r)
 		return -1;
-	r = sc_pkcs15_decipher(p15card, key_obj, 0, from, flen, to, flen);
+	r = sc_pkcs15_decipher(p15card, key_obj, SC_ALGORITHM_RSA_PAD_PKCS1, 
+	    from, flen, to, flen);
 	sc_unlock(card);
 	if (r < 0) {
 		error("sc_pkcs15_decipher() failed: %s", sc_strerror(r));