diff --git a/scitt/verify_receipt_signature.py b/scitt/verify_receipt_signature.py
index 40f6209..a578c4a 100644
--- a/scitt/verify_receipt_signature.py
+++ b/scitt/verify_receipt_signature.py
@@ -100,7 +100,7 @@ def verify_receipt(receipt: bytes) -> bool:
     # decode the cbor encoded cose sign1 message
     try:
         message = Sign1Message.decode(receipt)
-    except ValueError:
+    except (ValueError, AttributeError):
         print("failed to decode cose sign1 receipt", file=sys.stderr)
         return False