diff --git a/lib/amazonka-core/amazonka-core.cabal b/lib/amazonka-core/amazonka-core.cabal
index 7158a712c94..33391b46222 100644
--- a/lib/amazonka-core/amazonka-core.cabal
+++ b/lib/amazonka-core/amazonka-core.cabal
@@ -107,7 +107,7 @@ library
     , conduit               >=1.3
     , conduit-extra         >=1.3
     , containers            >=0.5      && <0.7
-    , cryptonite            >=0.25
+    , crypton               >=0.32     && <0.33
     , deepseq               >=1.4
     , hashable              >=1.2
     , http-client           >=0.5      && <0.8
diff --git a/lib/amazonka-core/src/Amazonka/Crypto.hs b/lib/amazonka-core/src/Amazonka/Crypto.hs
index 359de6bd31b..75d5b466d24 100644
--- a/lib/amazonka-core/src/Amazonka/Crypto.hs
+++ b/lib/amazonka-core/src/Amazonka/Crypto.hs
@@ -60,7 +60,7 @@ sinkMD5 = sinkHash
 sinkSHA256 :: Monad m => ConduitM ByteString o m (Hash.Digest Hash.SHA256)
 sinkSHA256 = sinkHash
 
--- | A cryptonite compatible incremental hash sink.
+-- | A crypton-compatible incremental hash sink.
 sinkHash ::
   ( Monad m,
     Hash.HashAlgorithm a
diff --git a/lib/amazonka-s3-encryption/amazonka-s3-encryption.cabal b/lib/amazonka-s3-encryption/amazonka-s3-encryption.cabal
index 00e66d0f414..602334ef7c4 100644
--- a/lib/amazonka-s3-encryption/amazonka-s3-encryption.cabal
+++ b/lib/amazonka-s3-encryption/amazonka-s3-encryption.cabal
@@ -99,7 +99,7 @@ library
     , bytestring            >=0.10.8
     , case-insensitive      >=1.2
     , conduit               >=1.3
-    , cryptonite            >=0.25
+    , crypton               >=0.32     && <0.33
     , http-client           >=0.5      && <0.8
     , lens                  >=4.14
     , memory                >=0.6
@@ -125,7 +125,7 @@ test-suite amazonka-s3-encryption-test
     , base
     , bytestring
     , conduit
-    , cryptonite
+    , crypton
     , mtl
     , QuickCheck
     , quickcheck-instances    >=0.3.25.2
diff --git a/lib/amazonka/CHANGELOG.md b/lib/amazonka/CHANGELOG.md
index d9dfea72d1f..d09f36d8cfe 100644
--- a/lib/amazonka/CHANGELOG.md
+++ b/lib/amazonka/CHANGELOG.md
@@ -117,6 +117,8 @@ Released: **?**, Compare: [2.0.0-rc1](https://github.com/brendanhay/amazonka/com
 
 ### Changed
 
+- `amazonka-core`: Use `crypton` instead of `cryptonite` to provide cryptographic primitives
+[\#920](https://github.com/brendanhay/amazonka/pull/920)
 - `amazonka-core`/`amazonka-redshift`/`amazonka-route53`/`amazonka-s3`: Support Melbourne region (`ap-southeast-4`).
 [\#897](https://github.com/brendanhay/amazonka/pull/897)
 - `amazonka`: Presigning functions do not require `MonadIO`.