diff --git a/kms/pkcs11/pkcs11.go b/kms/pkcs11/pkcs11.go
index 80e14e06..c0e06408 100644
--- a/kms/pkcs11/pkcs11.go
+++ b/kms/pkcs11/pkcs11.go
@@ -161,7 +161,7 @@ func (k *PKCS11) CreateSigner(req *apiv1.CreateSignerRequest) (crypto.Signer, er
 // module.
 func (k *PKCS11) CreateDecrypter(req *apiv1.CreateDecrypterRequest) (crypto.Decrypter, error) {
 	if req.DecryptionKey == "" {
-		return nil, errors.New("createDecrypterRequest 'decriptionKey' cannot be empty")
+		return nil, errors.New("createDecrypterRequest 'decryptionKey' cannot be empty")
 	}
 
 	signer, err := findSigner(k.p11, req.DecryptionKey)