diff --git a/mme/LTE_CryptoFunctions.ttcn b/mme/LTE_CryptoFunctions.ttcn
index 340b784..18a3755 100644
--- a/mme/LTE_CryptoFunctions.ttcn
+++ b/mme/LTE_CryptoFunctions.ttcn
@@ -176,20 +176,21 @@
 		if (not f_nas_check_ip(nus, secp_nas)) {
 			Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_nas_check_ip() failed");
 		}
+		nus.rx_count := nus.rx_count + 1;
 		return dec_PDU_NAS_EPS(secp_nas.nAS_Message);
 		}
 	case ('0001'B) { /* IP only */
-		nus.rx_count := nus.rx_count + 1;
 		if (not f_nas_check_ip(nus, secp_nas)) {
 			Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_nas_check_ip() failed");
 		}
+		nus.rx_count := nus.rx_count + 1;
 		return dec_PDU_NAS_EPS(secp_nas.nAS_Message);
 		}
 	case ('0010'B) { /* IP + ciphered */
-		nus.rx_count := nus.rx_count + 1;
 		if (not f_nas_check_ip(nus, secp_nas)) {
 			Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_nas_check_ip() failed");
 		}
+		nus.rx_count := nus.rx_count + 1;
 		f_nas_encrypt(nus.alg_enc, nus.k_nas_enc, nus.rx_count, 0,
 			      f_rx_is_downlink(nus), secp_nas.nAS_Message);
 		return dec_PDU_NAS_EPS(secp_nas.nAS_Message);
@@ -201,6 +202,7 @@
 		}
 		f_nas_encrypt(nus.alg_enc, nus.k_nas_enc, nus.rx_count, 0,
 			      f_rx_is_downlink(nus), secp_nas.nAS_Message);
+		nus.rx_count := nus.rx_count + 1;
 		return dec_PDU_NAS_EPS(secp_nas.nAS_Message);
 		}
 	//case ('0101'B) { /* IP + partially ciphered */ }