diff --git a/programs/cipher/cipher_aead_demo.c b/programs/cipher/cipher_aead_demo.c
index 366b9a3..18bd66c 100644
--- a/programs/cipher/cipher_aead_demo.c
+++ b/programs/cipher/cipher_aead_demo.c
@@ -192,7 +192,8 @@
 {
     int ret;
     size_t olen;
-    unsigned char out[MSG_MAX_SIZE + 16];
+#define MAX_TAG_LENGTH 16
+    unsigned char out[MSG_MAX_SIZE + MAX_TAG_LENGTH];
     unsigned char *p = out;
 
     CHK( mbedtls_cipher_set_iv( ctx, iv, iv_len ) );