diff --git a/src/dtls13.c b/src/dtls13.c
index 87c488a50..c5bd3d6b7 100644
--- a/src/dtls13.c
+++ b/src/dtls13.c
@@ -250,7 +250,12 @@ static int Dtls13GetRnMask(WOLFSSL* ssl, const byte* ciphertext, byte* mask,
 
         if (c->aes == NULL)
             return BAD_STATE_E;
+#if !defined(HAVE_SELFTEST) && \
+    (!defined(HAVE_FIPS) || (defined(FIPS_VERSION_GE) && FIPS_VERSION_GE(5,3)))
         return wc_AesEncryptDirect(c->aes, mask, ciphertext);
+#else
+        wc_AesEncryptDirect(c->aes, mask, ciphertext);
+#endif
     }
 #endif /* HAVE_AESGCM || HAVE_AESCCM */