diff --git a/lib/hcrypto/evp-pkcs11.c b/lib/hcrypto/evp-pkcs11.c
index f605dd8d5..ea47dd871 100644
--- a/lib/hcrypto/evp-pkcs11.c
+++ b/lib/hcrypto/evp-pkcs11.c
@@ -387,6 +387,7 @@ p11_md_update(EVP_MD_CTX *ctx, const void *data, size_t length)
     CK_RV rv;
 
     assert(p11_module != NULL);
+    assert(data != NULL || length == 0);
 
     rv = p11_module->C_DigestUpdate(p11ctx->hSession,
                                     data ? (CK_BYTE_PTR)data : (CK_BYTE_PTR)"",