Fixed ssl_pkcs11_decrypt() prototype
diff --git a/ChangeLog b/ChangeLog
index 4ea71d0..956bb3f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -3,6 +3,7 @@
 = Branch 1.2
 Bugfix
    * Fixed memory leak in RSA as a result of introduction of blinding
+   * Fixed ssl_pkcs11_decrypt() prototype
 
 = Version 1.2.9 released 2013-10-01
 Changes
diff --git a/include/polarssl/pkcs11.h b/include/polarssl/pkcs11.h
index 003d3f5..03912d5 100644
--- a/include/polarssl/pkcs11.h
+++ b/include/polarssl/pkcs11.h
@@ -132,15 +132,18 @@
 /**
  * SSL/TLS wrappers for PKCS#11 functions
  */
-static inline int ssl_pkcs11_decrypt( void *ctx, int mode, size_t *olen,
-                        const unsigned char *input, unsigned char *output,
-                        size_t output_max_len )
+static inline int ssl_pkcs11_decrypt( void *ctx,
+                     int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
+                     int mode, size_t *olen, const unsigned char *input,
+                     unsigned char *output, size_t output_max_len )
 {
+    ((void) f_rng);
+    ((void) p_rng);
     return pkcs11_decrypt( (pkcs11_context *) ctx, mode, olen, input, output,
                            output_max_len );
 }
 
-static inline int ssl_pkcs11_sign( void *ctx, 
+static inline int ssl_pkcs11_sign( void *ctx,
                      int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
                      int mode, int hash_id, unsigned int hashlen,
                      const unsigned char *hash, unsigned char *sig )