diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 319ad83..994f9a9 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -5332,7 +5332,7 @@
                                             output_length);
 
 exit:
-    if (status != PSA_SUCCESS) {
+    if (status != PSA_SUCCESS && output != NULL) {
         /* If an error happens and is not handled properly, the output
          * may be used as a key to protect sensitive data. Arrange for such
          * a key to be random, which is likely to result in decryption or