diff --git a/kdc/fast.c b/kdc/fast.c
index 8d519cb6f..4a22188a8 100644
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -237,9 +237,9 @@ fast_parse_cookie(kdc_request_t r, const PA_DATA *pa)
     if (ret)
 	goto out;
 
-    ret = krb5_decode_EncryptedData(crypto, crypto,
-				    KRB5_KU_H5L_COOKIE,
-				    &data.cookie, &d1);
+    ret = krb5_decrypt_EncryptedData(crypto, crypto,
+				     KRB5_KU_H5L_COOKIE,
+				     &data.cookie, &d1);
     krb5_crypto_destroy(r->context, crypto);
     if (ret)
 	goto out;