diff --git a/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj b/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
index f1a5f77..de6f8d1 100644
--- a/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
+++ b/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
@@ -27,7 +27,7 @@
     <PackageReference Include="AWSSDK.S3" Version="4.0.*" />
     <!-- scrypt for BYOK key decryption (.NET has no built-in scrypt). Reproduces the Node
          encryptApiKeyOverride scheme byte-for-byte — see ByokKeyProtector + golden-vector test. -->
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" />
     <PackageReference Include="Serilog.AspNetCore" Version="9.*" />
     <PackageReference Include="Serilog.Sinks.Console" Version="6.*" />
     <PackageReference Include="Serilog.Enrichers.Environment" Version="3.*" />
diff --git a/src/StackAlchemist.Engine/packages.lock.json b/src/StackAlchemist.Engine/packages.lock.json
index 6118bdb..4d70a7b 100644
--- a/src/StackAlchemist.Engine/packages.lock.json
+++ b/src/StackAlchemist.Engine/packages.lock.json
@@ -5,17 +5,17 @@
       "AWSSDK.S3": {
         "type": "Direct",
         "requested": "[4.0.*, )",
-        "resolved": "4.0.101.3",
-        "contentHash": "WT2Ae507GcFE2SFZwHpGNcGaCR0GvNS4Ea2+iuSTwYxlTid4YPVLjpUQlU34gB2CNII8TwdkvHWBbqh7va0ZWA==",
+        "resolved": "4.0.101.6",
+        "contentHash": "LsVXGc3lyJuUJe+EbGubkFeR0cVmtmj4YdMChqsqSIsjZtCMzPg2BXR7cJqcrIBGoHab3q3RS6K8T9QD2tbhhQ==",
         "dependencies": {
-          "AWSSDK.Core": "[4.0.100.6, 5.0.0)"
+          "AWSSDK.Core": "[4.0.100.9, 5.0.0)"
         }
       },
       "BouncyCastle.Cryptography": {
         "type": "Direct",
-        "requested": "[2.6.2, )",
-        "resolved": "2.6.2",
-        "contentHash": "7oWOcvnntmMKNzDLsdxAYqApt+AjpRpP2CShjMfIa3umZ42UQMvH0tl1qAliYPNYO6vTdcGMqnRrCPmsfzTI1w=="
+        "requested": "[2.7.0, )",
+        "resolved": "2.7.0",
+        "contentHash": "U+12df8UEWHgBi04YVf/Lgi2dy3SItlIYvHjjEVa/BngCQIzDCDRBk50DDByCfDvSbe5pRNFr3b7UrVK2kMcLw=="
       },
       "DotNetEnv": {
         "type": "Direct",
@@ -156,8 +156,8 @@
       },
       "AWSSDK.Core": {
         "type": "Transitive",
-        "resolved": "4.0.100.6",
-        "contentHash": "n5B+GywQ+B6E92ULn75KzF1Mn9USXZocgAkZ6NTDsYgHQFfXldC2+CBZgpg/by2OuuJ/TvEeRwHDCE+0xRBsFw=="
+        "resolved": "4.0.100.9",
+        "contentHash": "OPYy41jZjXwxxcYRotaq24HDrwUnVtBB/mvg1IwB9D1ICXAtHqMa1sp2hpmlVJCZwjlcrPcTCJIejInvV1vp5g=="
       },
       "Microsoft.Extensions.DependencyModel": {
         "type": "Transitive",