diff --git a/Cargo.lock b/Cargo.lock
index 0bf125a7..1680bda4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1039,9 +1039,9 @@ checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
 [[package]]
 name = "hkdf"
-version = "0.12.3"
+version = "0.12.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "791a029f6b9fc27657f6f188ec6e5e43f6911f6f878e0dc5501396e09809d437"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
 dependencies = [
  "hmac 0.12.1",
 ]
diff --git a/core/Cargo.toml b/core/Cargo.toml
index 8d7bab88..ad57e57c 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -20,7 +20,7 @@ json = ["tink-proto/json", "serde", "serde_json"]
 
 [dependencies]
 digest = "^0.10.7"
-hkdf = "^0.12.3"
+hkdf = "^0.12.4"
 lazy_static = "^1.4"
 rand = "^0.8"
 serde = { version = "^1.0.192", features = ["derive"], optional = true }
diff --git a/prf/Cargo.toml b/prf/Cargo.toml
index 5b049018..fdcca59b 100644
--- a/prf/Cargo.toml
+++ b/prf/Cargo.toml
@@ -15,7 +15,7 @@ categories = ["cryptography"]
 aes = "^0.8.3"
 cmac = "^0.7.2"
 digest = "^0.10.7"
-hkdf = "^0.12.3"
+hkdf = "^0.12.4"
 hmac = { version = "^0.12.1", features = ["reset"] }
 sha-1 = "^0.10.1"
 sha2 = "^0.10.8"