diff --git a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
index 9efa197..3101e56 100644
--- a/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
+++ b/src/PostQuantum.DataProtection/PostQuantum.DataProtection.csproj
@@ -66,7 +66,7 @@
 
   <ItemGroup>
     <!-- BouncyCastle is only needed on net8.0 and net9.0 — net10.0 uses System.Security.Cryptography.MLKem directly. -->
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.6.2" Condition="'$(TargetFramework)' != 'net10.0'" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.7.0" Condition="'$(TargetFramework)' != 'net10.0'" />
     <PackageReference Include="PostQuantum.KeyManagement" Version="1.0.1" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.Abstractions" Version="8.0.27" />
     <PackageReference Include="Microsoft.AspNetCore.DataProtection.Extensions" Version="8.0.27" />