diff --git a/library/pkcs12.c b/library/pkcs12.c
index 8dd5f7490..06b0c125a 100644
--- a/library/pkcs12.c
+++ b/library/pkcs12.c
@@ -324,7 +324,7 @@ int mbedtls_pkcs12_derivation( unsigned char *data, size_t datalen,
 
     unsigned char diversifier[128];
     unsigned char salt_block[128], pwd_block[128], hash_block[128] = {0};
-    unsigned char hash_output[MBEDTLS_MD_MAX_SIZE];
+    unsigned char hash_output[64]; /* Maximal hash size for SHA512 */
     unsigned char *p;
     unsigned char c;
     int           use_password = 0;