diff --git a/lib/SAML2/Assertion.php b/lib/SAML2/Assertion.php
index 740c6a835bc186ff76b157c7f6bdf520db80b156..11a5434d5bef45ad112b8d757d2552139b571ee2 100644
--- a/lib/SAML2/Assertion.php
+++ b/lib/SAML2/Assertion.php
@@ -624,6 +624,7 @@ class SAML2_Assertion implements SAML2_SignedElement {
 		}
 
 		$nameId = SAML2_Utils::decryptElement($this->encryptedNameId, $key);
+		SimpleSAML_Utilities::debugMessage($nameId, 'decrypt');
 		$this->nameId = SAML2_Utils::parseNameId($nameId);
 
 		$this->encryptedNameId = NULL;
diff --git a/lib/SAML2/LogoutRequest.php b/lib/SAML2/LogoutRequest.php
index ea3790d69845207ab0625cffa5270928ccc498da..1fd7b85430625e63c17d30a4180daabb646fa9e3 100644
--- a/lib/SAML2/LogoutRequest.php
+++ b/lib/SAML2/LogoutRequest.php
@@ -99,6 +99,7 @@ class SAML2_LogoutRequest extends SAML2_Request {
 		SAML2_Utils::addNameId($root, $this->nameId);
 		$nameId = $root->firstChild;
 
+		SimpleSAML_Utilities::debugMessage($nameId, 'encrypt');
 
 		/* Encrypt the NameID. */
 		$enc = new XMLSecEnc();
@@ -127,6 +128,7 @@ class SAML2_LogoutRequest extends SAML2_Request {
 		}
 
 		$nameId = SAML2_Utils::decryptElement($this->encryptedNameId, $key);
+		SimpleSAML_Utilities::debugMessage($nameId, 'decrypt');
 		$this->nameId = SAML2_Utils::parseNameId($nameId);
 
 		$this->encryptedNameId = NULL;