diff --git a/Cargo.lock b/Cargo.lock
index 50556b7..40b453b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -235,7 +235,7 @@ dependencies = [
  "salty",
  "serde",
  "serde_with",
- "sha3",
+ "sha3 0.12.0",
  "static_assertions",
  "thiserror 2.0.18",
 ]
@@ -451,7 +451,7 @@ dependencies = [
  "secrecy",
  "serde",
  "serde_with",
- "sha3",
+ "sha3 0.10.8",
  "sled-hardware-types",
  "slog",
  "slog-error-chain 0.1.0 (git+https://github.com/oxidecomputer/slog-error-chain?branch=main)",
@@ -1164,7 +1164,7 @@ dependencies = [
  "rpassword",
  "serde_json",
  "serialport",
- "sha3",
+ "sha3 0.12.0",
  "string-error",
  "tempfile",
  "x509-cert",
@@ -1219,7 +1219,7 @@ dependencies = [
  "p384",
  "pki-playground",
  "rats-corim",
- "sha3",
+ "sha3 0.12.0",
  "sled-agent-client",
  "sled-agent-types-versions",
  "slog",
@@ -2500,6 +2500,16 @@ dependencies = [
  "cpufeatures 0.2.12",
 ]
 
+[[package]]
+name = "keccak"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e24a010dd405bd7ed803e5253182815b41bf2e6a80cc3bfc066658e03a198aa"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+]
+
 [[package]]
 name = "knus"
 version = "3.4.0"
@@ -3469,7 +3479,7 @@ dependencies = [
  "rsa",
  "sha1",
  "sha2 0.10.9",
- "sha3",
+ "sha3 0.10.8",
  "signature",
  "spki",
  "x509-cert",
@@ -4735,7 +4745,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "75872d278a8f37ef87fa0ddbda7802605cb18344497949862c0d4dcb291eba60"
 dependencies = [
  "digest 0.10.7",
- "keccak",
+ "keccak 0.1.5",
+]
+
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest 0.11.3",
+ "keccak 0.2.0",
+ "sponge-cursor",
 ]
 
 [[package]]
@@ -4874,7 +4895,7 @@ dependencies = [
  "serde_human_bytes",
  "serde_json",
  "serde_with",
- "sha3",
+ "sha3 0.10.8",
  "sled-hardware-types",
  "slog",
  "strum 0.27.2",
@@ -5091,6 +5112,12 @@ dependencies = [
  "der",
 ]
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "stable_deref_trait"
 version = "1.2.1"
@@ -6077,7 +6104,7 @@ dependencies = [
  "pem-rfc7468 1.0.0",
  "rats-corim",
  "serde_json",
- "sha3",
+ "sha3 0.12.0",
  "slog",
  "slog-async",
  "slog-envlogger",
diff --git a/Cargo.toml b/Cargo.toml
index 66d8593..cd99156 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -47,7 +47,7 @@ serde_json = { version = "1.0.150", features = ["std", "alloc"] }
 serde_with = { version = "3.21.0", default-features = false }
 serialport = { git = "https://github.com/jgallagher/serialport-rs", branch = "illumos-support" }
 sha2 = "0.11.0"
-sha3 = { version = "0.10.8", default-features = false }
+sha3 = { version = "0.12.0", default-features = false }
 sled-agent-client = { git = "https://github.com/oxidecomputer/omicron", rev = "becbbb616f5f18b59cc42e511c148734c2ba3831" }
 sled-agent-types-versions = { git = "https://github.com/oxidecomputer/omicron", rev = "becbbb616f5f18b59cc42e511c148734c2ba3831" }
 slog = { version = "2.8.2", default-features = false }