diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index fb74a0d..0b64781 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -3626,6 +3626,11 @@
 
 exit:
 
+    /* In case the operation fails and the user fails to check for failure or
+     * the zero tag size, make sure the tag is set to something impossible. */
+    if( status != PSA_SUCCESS )
+        memset(tag, '!', tag_size);
+
     psa_aead_abort( operation );
 
     return( status );