diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index dcb8c98ccf..6e3dff79b4 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -5101,7 +5101,7 @@ int mbedtls_ssl_get_record_expansion( const mbedtls_ssl_context *ssl )
     {
         transform_expansion = transform->minlen;
     }
-    else if ( transform->psa_alg )
+    else if ( transform->psa_alg == PSA_ALG_CBC_NO_PADDING )
     {
         (void) psa_get_key_attributes( transform->psa_key_enc, &attr );
         key_type = psa_get_key_type( &attr );