diff --git a/Cargo.lock b/Cargo.lock
index f7ad7f7d..797467e9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -115,7 +115,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
 dependencies = [
  "generic-array",
- "rand_core",
+ "rand_core 0.6.4",
  "subtle",
  "zeroize",
 ]
@@ -238,7 +238,7 @@ dependencies = [
  "hkdf",
  "pem-rfc7468",
  "pkcs8",
- "rand_core",
+ "rand_core 0.6.4",
  "sec1",
  "subtle",
  "zeroize",
@@ -266,7 +266,7 @@ version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
 dependencies = [
- "rand_core",
+ "rand_core 0.6.4",
  "subtle",
 ]
 
@@ -433,7 +433,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
 dependencies = [
  "ff",
- "rand_core",
+ "rand_core 0.6.4",
  "subtle",
 ]
 
@@ -475,7 +475,7 @@ dependencies = [
  "hmac",
  "once_cell",
  "pbkdf2",
- "rand_core",
+ "rand_core 0.9.5",
  "sha2",
  "subtle-encoding",
  "zeroize",
@@ -866,6 +866,15 @@ dependencies = [
  "getrandom 0.2.17",
 ]
 
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
 [[package]]
 name = "rfc6979"
 version = "0.4.0"
@@ -1094,7 +1103,7 @@ dependencies = [
  "p256",
  "p384",
  "pkcs8",
- "rand_core",
+ "rand_core 0.9.5",
  "signature",
  "tempfile",
  "zeroize",
@@ -1107,7 +1116,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
 dependencies = [
  "digest",
- "rand_core",
+ "rand_core 0.6.4",
 ]
 
 [[package]]
diff --git a/hkd32/Cargo.toml b/hkd32/Cargo.toml
index 575cbdd3..750fa93b 100644
--- a/hkd32/Cargo.toml
+++ b/hkd32/Cargo.toml
@@ -20,7 +20,7 @@ rust-version = "1.85"
 
 [dependencies]
 hmac = { version = "0.12", default-features = false }
-rand_core = { version = "0.6", default-features = false }
+rand_core = { version = "0.9", default-features = false }
 sha2 = { version = "0.10", default-features = false }
 zeroize = { version = "1", default-features = false }
 
@@ -31,7 +31,7 @@ subtle-encoding = { version = "=0.6.0-pre", optional = true, default-features =
 
 [dev-dependencies]
 hex-literal = "1.1"
-rand_core = { version = "0.6", features = ["std"] }
+rand_core = { version = "0.9", features = ["std"] }
 
 [features]
 default = ["alloc", "bech32"]
diff --git a/signatory/Cargo.toml b/signatory/Cargo.toml
index cf2efcd9..ace701dc 100644
--- a/signatory/Cargo.toml
+++ b/signatory/Cargo.toml
@@ -14,7 +14,7 @@ rust-version = "1.85"
 
 [dependencies]
 pkcs8 = { version = "0.10", features = ["alloc", "pem"] }
-rand_core = "0.6"
+rand_core = "0.9"
 signature = "2"
 zeroize = "1.5"