diff --git a/Cargo.lock b/Cargo.lock
index 110e196..00671f7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -321,7 +321,7 @@ dependencies = [
  "salty",
  "serde",
  "serde_with",
- "sha3",
+ "sha3 0.12.0",
  "static_assertions",
  "thiserror 2.0.18",
 ]
@@ -624,7 +624,7 @@ dependencies = [
  "secrecy",
  "serde",
  "serde_with",
- "sha3",
+ "sha3 0.10.8",
  "sled-hardware-types",
  "slog",
  "slog-error-chain 0.1.0 (git+https://github.com/oxidecomputer/slog-error-chain?branch=main)",
@@ -971,7 +971,7 @@ version = "3.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "faf9468729b8cbcea668e36183cb69d317348c2e08e994829fb56ebfdfbaac34"
 dependencies = [
- "windows-sys 0.48.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1561,7 +1561,7 @@ dependencies = [
  "rpassword",
  "serde_json",
  "serialport 4.2.1-alpha.0",
- "sha3",
+ "sha3 0.12.0",
  "string-error",
  "tempfile",
  "x509-cert",
@@ -1616,7 +1616,7 @@ dependencies = [
  "pki-playground",
  "rats-corim",
  "rsa",
- "sha3",
+ "sha3 0.12.0",
  "thiserror 2.0.18",
  "x509-cert",
 ]
@@ -3198,6 +3198,16 @@ dependencies = [
  "cpufeatures 0.2.12",
 ]
 
+[[package]]
+name = "keccak"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8f198d1db720e4940b5a493201d199d9f24f568f8f746bd13706243a2f71598"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+]
+
 [[package]]
 name = "knus"
 version = "3.4.0"
@@ -4268,7 +4278,7 @@ dependencies = [
  "rsa",
  "sha1 0.10.6",
  "sha2 0.10.9",
- "sha3",
+ "sha3 0.10.8",
  "signature",
  "spki",
  "x509-cert",
@@ -4303,7 +4313,7 @@ dependencies = [
  "platform-rot",
  "serde",
  "serde_with",
- "sha3",
+ "sha3 0.12.0",
  "sled-agent-client",
  "sled-agent-types-versions",
  "slog",
@@ -5705,7 +5715,18 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "75872d278a8f37ef87fa0ddbda7802605cb18344497949862c0d4dcb291eba60"
 dependencies = [
  "digest 0.10.7",
- "keccak",
+ "keccak 0.1.6",
+]
+
+[[package]]
+name = "sha3"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc9bad02c26382724b2d2692c6f179285e4b54eeecd7968f52a50059c3c11759"
+dependencies = [
+ "digest 0.11.3",
+ "keccak 0.2.2",
+ "sponge-cursor",
 ]
 
 [[package]]
@@ -5859,7 +5880,7 @@ dependencies = [
  "serde",
  "serde_json",
  "serde_with",
- "sha3",
+ "sha3 0.10.8",
  "sled-hardware-types",
  "slog",
  "slog-error-chain 0.1.0 (git+https://github.com/oxidecomputer/slog-error-chain?branch=main)",
@@ -6064,6 +6085,12 @@ dependencies = [
  "der",
 ]
 
+[[package]]
+name = "sponge-cursor"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
+
 [[package]]
 name = "stable_deref_trait"
 version = "1.2.1"
@@ -7090,7 +7117,7 @@ dependencies = [
  "platform-rot",
  "rats-corim",
  "serde_json",
- "sha3",
+ "sha3 0.12.0",
  "slog",
  "slog-async",
  "slog-envlogger",
@@ -7312,7 +7339,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.48.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 9ec270a..734d0c3 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -54,7 +54,7 @@ serde_json = { version = "1.0.150", features = ["std", "alloc"] }
 serde_with = { version = "3.21.0", default-features = false }
 serialport = { git = "https://github.com/jgallagher/serialport-rs", branch = "illumos-support" }
 sha2 = "0.11.0"
-sha3 = { version = "0.10.8", default-features = false }
+sha3 = { version = "0.12.0", default-features = false }
 sled-agent-client = { git = "https://github.com/oxidecomputer/omicron", rev = "f8e9052b768e1fa9c3fc16ef033fcab9ede3b806" }
 sled-agent-types-versions = { git = "https://github.com/oxidecomputer/omicron", rev = "f8e9052b768e1fa9c3fc16ef033fcab9ede3b806" }
 slog = { version = "2.8.2", default-features = false }