diff --git a/CHANGELOG.md b/CHANGELOG.md
index c356b280..b8a8ebf6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.1] - 2023-12-19
+
+### Fixed
+- CX: Fix AES implementation on NanoS
+
 ## [0.4.0] - 2023-12-04
 
 ### Fixed
diff --git a/src/bolos/cx_aes_sdk2.c b/src/bolos/cx_aes_sdk2.c
index b2b43982..a49bb073 100644
--- a/src/bolos/cx_aes_sdk2.c
+++ b/src/bolos/cx_aes_sdk2.c
@@ -37,7 +37,7 @@ cx_err_t sys_cx_aes_set_key_hw(const cx_aes_key_t *key, uint32_t mode)
   }
   local_aes_op = mode & CX_MASK_SIGCRYPT;
   local_aes_chain_mode = mode & CX_MASK_CHAIN;
-  set_aes_iv = true;
+  set_aes_iv = hdw_cbc;
   local_aes_ready = true;
 
   return CX_OK;