diff --git a/agent/protect-tool.c b/agent/protect-tool.c
index 31256695e..bcbe4588d 100644
--- a/agent/protect-tool.c
+++ b/agent/protect-tool.c
@@ -318,6 +318,11 @@ read_key (const char *fname)
   buf = read_file (fname, &buflen);
   if (!buf)
     return NULL;
+  if (buflen >= 4 && !memcmp (buf, "Key:", 4))
+    {
+      log_error ("Extended key format is not supported by this tool\n");
+      return NULL;
+    }
   key = make_canonical (fname, buf, buflen);
   xfree (buf);
   return key;