diff --git a/Cargo.lock b/Cargo.lock
index a70480f4..7337ccf9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -21,7 +21,7 @@ version = "0.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
 dependencies = [
- "crypto-common",
+ "crypto-common 0.1.7",
  "generic-array 0.14.7",
 ]
 
@@ -495,7 +495,7 @@ dependencies = [
  "dashmap",
  "getrandom 0.2.16",
  "hex",
- "hmac",
+ "hmac 0.13.0",
  "lazy_static",
  "log",
  "lru 0.16.3",
@@ -533,7 +533,7 @@ dependencies = [
  "chrono",
  "futures",
  "hex",
- "hmac",
+ "hmac 0.13.0",
  "http 1.4.0",
  "httparse",
  "ipnetwork 0.20.0",
@@ -632,6 +632,15 @@ dependencies = [
  "generic-array 0.14.7",
 ]
 
+[[package]]
+name = "block-buffer"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdd35008169921d80bc60d3d0ab416eecb028c4cd653352907921d95084790be"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "bq-crypto"
 version = "0.1.0"
@@ -688,7 +697,7 @@ dependencies = [
  "getrandom 0.2.16",
  "hex",
  "hidapi",
- "hmac",
+ "hmac 0.13.0",
  "libc",
  "pqc-dilithium-seeded",
  "proptest",
@@ -879,7 +888,7 @@ version = "0.4.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
 dependencies = [
- "crypto-common",
+ "crypto-common 0.1.7",
  "inout",
  "zeroize",
 ]
@@ -944,6 +953,12 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "cmov"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de0758edba32d61d1fd9f4d69491b47604b91ee2f7e6b33de7e54ca4ebe55dc3"
+
 [[package]]
 name = "color-eyre"
 version = "0.6.5"
@@ -1144,6 +1159,15 @@ dependencies = [
  "typenum",
 ]
 
+[[package]]
+name = "crypto-common"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77727bb15fa921304124b128af125e7e3b968275d1b108b379190264f4423710"
+dependencies = [
+ "hybrid-array",
+]
+
 [[package]]
 name = "ctr"
 version = "0.9.2"
@@ -1153,6 +1177,15 @@ dependencies = [
  "cipher",
 ]
 
+[[package]]
+name = "ctutils"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1005a6d4446f5120ef475ad3d2af2b30c49c2c9c6904258e3bb30219bebed5e4"
+dependencies = [
+ "cmov",
+]
+
 [[package]]
 name = "curve25519-dalek"
 version = "4.1.3"
@@ -1285,10 +1318,21 @@ checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
  "block-buffer 0.10.4",
  "const-oid",
- "crypto-common",
+ "crypto-common 0.1.7",
  "subtle",
 ]
 
+[[package]]
+name = "digest"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4850db49bf08e663084f7fb5c87d202ef91a3907271aff24a94eb97ff039153c"
+dependencies = [
+ "block-buffer 0.12.0",
+ "crypto-common 0.2.1",
+ "ctutils",
+]
+
 [[package]]
 name = "displaydoc"
 version = "0.2.5"
@@ -1901,7 +1945,7 @@ version = "0.12.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
 dependencies = [
- "hmac",
+ "hmac 0.12.1",
 ]
 
 [[package]]
@@ -1913,6 +1957,15 @@ dependencies = [
  "digest 0.10.7",
 ]
 
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.2",
+]
+
 [[package]]
 name = "http"
 version = "0.2.12"
@@ -1969,6 +2022,15 @@ version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
 
+[[package]]
+name = "hybrid-array"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8655f91cd07f2b9d0c24137bd650fe69617773435ee5ec83022377777ce65ef1"
+dependencies = [
+ "typenum",
+]
+
 [[package]]
 name = "hyper"
 version = "1.8.1"
@@ -2339,7 +2401,7 @@ dependencies = [
  "base64",
  "ed25519-dalek",
  "getrandom 0.2.16",
- "hmac",
+ "hmac 0.12.1",
  "js-sys",
  "p256",
  "p384",
@@ -3509,7 +3571,7 @@ version = "0.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
 dependencies = [
- "hmac",
+ "hmac 0.12.1",
  "subtle",
 ]
 
@@ -4606,7 +4668,7 @@ version = "0.5.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
 dependencies = [
- "crypto-common",
+ "crypto-common 0.1.7",
  "subtle",
 ]
 
diff --git a/crates/bq-sdk/Cargo.toml b/crates/bq-sdk/Cargo.toml
index 813244da..b0614d4d 100644
--- a/crates/bq-sdk/Cargo.toml
+++ b/crates/bq-sdk/Cargo.toml
@@ -22,7 +22,7 @@ pqc-dilithium-seeded = { path = "../pqc-dilithium-seeded", version = "0.2.1" }
 # Cryptography
 sha2 = "0.10"
 ripemd = "0.1"
-hmac = "0.12"
+hmac = "0.13"
 argon2 = "0.5"
 rand = "0.8"
 rand_core = "0.6"
diff --git a/crates/node/Cargo.toml b/crates/node/Cargo.toml
index 4cf374ac..49c3a0cb 100644
--- a/crates/node/Cargo.toml
+++ b/crates/node/Cargo.toml
@@ -35,7 +35,7 @@ chrono = "0.4"
 clap.workspace = true
 getrandom = "0.2"
 hex.workspace = true
-hmac = "0.12"
+hmac = "0.13"
 log = "0.4"
 nix = { version = "0.29", features = ["fs", "user"] }
 num_cpus = "1.16"
diff --git a/crates/rpc/Cargo.toml b/crates/rpc/Cargo.toml
index 00610b8d..6f9009e7 100644
--- a/crates/rpc/Cargo.toml
+++ b/crates/rpc/Cargo.toml
@@ -29,7 +29,7 @@ rcgen = "0.14"
 # JWT Authentication
 jsonwebtoken = { version = "10", default-features = false, features = ["rust_crypto"] }
 chrono = { version = "0.4", features = ["serde"] }
-hmac = "0.12"
+hmac = "0.13"
 sha2 = "0.10"
 rand = "0.8"
 argon2 = "0.5"