diff --git a/library/aesce.c b/library/aesce.c
index 9a82731f0e..b786563974 100644
--- a/library/aesce.c
+++ b/library/aesce.c
@@ -248,6 +248,8 @@ int mbedtls_aesce_crypt_ecb(mbedtls_aes_context *ctx,
     if (mode == MBEDTLS_AES_DECRYPT) {
         block = aesce_decrypt_block(block, keys, ctx->nr);
     } else
+#else
+    (void) mode;
 #endif
     {
         block = aesce_encrypt_block(block, keys, ctx->nr);
diff --git a/tests/scripts/all.sh b/tests/scripts/all.sh
index 0f653fed19..db5f29bf67 100755
--- a/tests/scripts/all.sh
+++ b/tests/scripts/all.sh
@@ -4644,7 +4644,7 @@ component_test_block_cipher_no_decrypt_aesce_armcc () {
     # test AESCE baremetal build
     scripts/config.py set MBEDTLS_AESCE_C
     msg "build: default config + BLOCK_CIPHER_NO_DECRYPT with AESCE"
-    armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto"
+    armc6_build_test "-O1 --target=aarch64-arm-none-eabi -march=armv8-a+crypto -Werror -Wall -Wextra"
 
     # Make sure we don't have mbedtls_xxx_setkey_dec in AES/ARIA/CAMELLIA
     not grep mbedtls_aes_setkey_dec library/aes.o