What does HRESULT 0x80091011 (CRYPT_E_STREAM_INSUFFICIENT_DATA) mean?

 
Previous Next
CRYPT_E_STREAM_MSG_NOT_READY CRYPT_E_BAD_LEN

CRYPT_E_STREAM_INSUFFICIENT_DATA

The streamed message ended or paused before enough data was available to complete the requested decode operation.

What to check for CRYPT_E_STREAM_INSUFFICIENT_DATA

  • Confirm that the transport delivered the complete binary message and did not truncate it at a content-length, framing, or file boundary.
  • Keep track of the final-input marker passed to CryptMsgUpdate; do not mark a partial payload as complete.
  • If the message is legitimately incremental, continue the decode only after additional bytes are available.

Microsoft: CryptMsgUpdate

Microsoft: CryptMsgOpenToDecode

Diagnostic interpretation of CRYPT_E_STREAM_INSUFFICIENT_DATA

CRYPT_E_STREAM_INSUFFICIENT_DATA has the HRESULT value 0x80091011. AllStat records the condition as “The streamed cryptographic message requires more data to complete the decode operation.”. For CRYPT_E_STREAM_INSUFFICIENT_DATA, in practice, interpret that wording at the boundary owned by cryptography, certificate, trust, or key-provider processing, rather than treating the value as a generic Windows message.

Evidence to capture for CRYPT_E_STREAM_INSUFFICIENT_DATA

  • Record the exact COM method or Windows API, its input object, the calling thread, and the full 0x80091011 value before a wrapper converts it to an exception or Boolean result.
  • Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions CRYPT_E_STREAM_INSUFFICIENT_DATA or the crypt / stream / insufficient / data operation.
  • For CRYPT_E_STREAM_INSUFFICIENT_DATA, compare the failing machine with a working one at the same configuration boundary: component version, policy, registration, identity, and target resource.

Retry and recovery for CRYPT_E_STREAM_INSUFFICIENT_DATA

Retry CRYPT_E_STREAM_INSUFFICIENT_DATA only when the owning API documents a transient state or after the condition described as “The streamed cryptographic message requires more data to complete the decode operation.” has changed. For CRYPT_E_STREAM_INSUFFICIENT_DATA, configuration, policy, format, and authorization failures normally require correction first; an immediate loop can hide the original call site and add secondary errors.


Looking for a different code? Search another status or error code.