diff --git a/library/rsa.c b/library/rsa.c
index 88c1cf1..38ce62d 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1387,18 +1387,20 @@
                                  int mode, size_t *olen,
                                  const unsigned char *input,
                                  unsigned char *output,
-                                 size_t output_max_len)
+                                 size_t output_max_len )
 {
     int ret;
-    size_t ilen, pad_count = 0, i;
-    unsigned char *p, bad, pad_done = 0;
+    size_t ilen = ctx->len;
+    size_t pad_count = 0;
+    size_t i;
+    unsigned bad = 0;
+    unsigned char pad_done = 0;
     unsigned char buf[MBEDTLS_MPI_MAX_SIZE];
+    unsigned char *p = buf;
 
     if( mode == MBEDTLS_RSA_PRIVATE && ctx->padding != MBEDTLS_RSA_PKCS_V15 )
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
 
-    ilen = ctx->len;
-
     if( ilen < 16 || ilen > sizeof( buf ) )
         return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
 
@@ -1409,9 +1411,6 @@
     if( ret != 0 )
         goto cleanup;
 
-    p = buf;
-    bad = 0;
-
     /*
      * Check and get padding len in "constant-time"
      */