diff --git a/keystore2/src/operation.rs b/keystore2/src/operation.rs
index 13a9b0c..7c3d201 100644
--- a/keystore2/src/operation.rs
+++ b/keystore2/src/operation.rs
@@ -377,7 +377,13 @@
         .context("In update: KeyMint::update failed.")?;
 
         match output {
-            Some(blob) => Ok(Some(blob.data)),
+            Some(blob) => {
+                if blob.data.is_empty() {
+                    Ok(None)
+                } else {
+                    Ok(Some(blob.data))
+                }
+            }
             None => Ok(None),
         }
     }