diff --git a/build.gradle b/build.gradle
index 11df4ab..40b99f0 100644
--- a/build.gradle
+++ b/build.gradle
@@ -42,10 +42,10 @@ dependencies {
 
     // We're depending on BouncyCastle just so we can use a base64 encoder on Android 21+. See:
     // https://github.com/relaycorp/awala-poweb-jvm/issues/66
-    implementation("org.bouncycastle:bcpkix-jdk15on:1.67")
+    implementation("org.bouncycastle:bcpkix-jdk15on:1.68")
 
     // Handshake nonce signatures
-    implementation("org.bouncycastle:bcpkix-jdk15on:1.67")
+    implementation("org.bouncycastle:bcpkix-jdk15on:1.68")
 
     // HTTP + WebSockets handling
     implementation("io.ktor:ktor-client-okhttp:$ktorVersion")