diff --git a/pkg/pkcs15/encrypted_envelope.go b/pkg/pkcs15/encrypted_envelope.go
index 71433d1..a6dc525 100644
--- a/pkg/pkcs15/encrypted_envelope.go
+++ b/pkg/pkcs15/encrypted_envelope.go
@@ -25,7 +25,7 @@ const (
 // params expected in the APC file.
 func (p15 *pkcs15KeyCert) computeEncryptedKeyEnvelope() error {
 	// if computation already performed, this is a no-op (keep existing envelope)
-	if p15.envelopedPrivateKey != nil && len(p15.envelopedPrivateKey) != 0 {
+	if len(p15.envelopedPrivateKey) > 0 {
 		return nil
 	}