diff --git a/samples/MultiReplica.Sample/MultiReplica.Sample.csproj b/samples/MultiReplica.Sample/MultiReplica.Sample.csproj
index ce281ec..249868f 100644
--- a/samples/MultiReplica.Sample/MultiReplica.Sample.csproj
+++ b/samples/MultiReplica.Sample/MultiReplica.Sample.csproj
@@ -14,7 +14,7 @@
     <ProjectReference Include="../../src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj" />
     <ProjectReference Include="../../src/PostQuantum.DataProtection.AzureKeyVault/PostQuantum.DataProtection.AzureKeyVault.csproj" />
     <PackageReference Include="Microsoft.Extensions.Logging.Console" Version="8.0.1" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="8.0.27" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.9" />
   </ItemGroup>
 
 </Project>
diff --git a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
index d0dc892..a9da703 100644
--- a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
+++ b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
@@ -67,8 +67,9 @@
   <ItemGroup>
     <!-- BouncyCastle is only needed on net8.0 and net9.0 — net10.0 uses System.Security.Cryptography.MLKem directly. -->
     <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" Condition="'$(TargetFramework)' != 'net10.0'" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.9" />
     <PackageReference Include="PostQuantum.KeyManagement" Version="1.0.1" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="8.0.27" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="10.0.9" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.Extensions" Version="8.0.27" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
     <PackageReference Include="Microsoft.Extensions.Options" Version="8.0.2" />
diff --git a/tests/PostQuantum.DataProtection.Tests/PostQuantum.DataProtection.Tests.csproj b/tests/PostQuantum.DataProtection.Tests/PostQuantum.DataProtection.Tests.csproj
index c3505b0..6da82c3 100644
--- a/tests/PostQuantum.DataProtection.Tests/PostQuantum.DataProtection.Tests.csproj
+++ b/tests/PostQuantum.DataProtection.Tests/PostQuantum.DataProtection.Tests.csproj
@@ -18,9 +18,9 @@
     </PackageReference>
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" Version="8.0.1" />
     <PackageReference Include="Microsoft.Extensions.Logging" Version="8.0.1" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="8.0.27" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.9" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.Extensions" Version="8.0.27" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="8.0.3" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.9" />
     <PackageReference Include="PostQuantum.KeyManagement" Version="1.0.1" />
   </ItemGroup>