diff --git a/ble/sm.c b/ble/sm.c
index 2a5cc4a05..b33d1fed3 100644
--- a/ble/sm.c
+++ b/ble/sm.c
@@ -746,6 +746,7 @@ static void sm_cmac_handle_encryption_result(sm_key_t data){
             // done
             log_key("CMAC", data);
             sm_cmac_done_handler(data);
+            sm_cmac_state = CMAC_IDLE;
             break;
         default:
             log_info("sm_cmac_handle_encryption_result called in state %u", sm_cmac_state);