diff --git a/Changelog.markdown b/Changelog.markdown
--- a/Changelog.markdown
+++ b/Changelog.markdown
@@ -1,3 +1,7 @@
+# v0.5.1 (2026-01-14)
+
+* switch to crypton-asn1-types and upgrade crypton modules to fix compilation error
+
 # v0.5.0 (2025-08-31)
 
 * add encryption support via TLS
diff --git a/README.markdown b/README.markdown
--- a/README.markdown
+++ b/README.markdown
@@ -10,6 +10,7 @@
 * asynchronous server-to-client callbacks (for server-initiated notifications)
 * timeouts
 * leverages [winery](https://hackage.haskell.org/package/winery) for high-performance serialization
+* TLS including mutual TLS (mTLS) authentication
 
 ## Requirements
 
diff --git a/bench/Basic.hs b/bench/Basic.hs
--- a/bench/Basic.hs
+++ b/bench/Basic.hs
@@ -1,6 +1,6 @@
 {-# LANGUAGE DerivingStrategies, DeriveGeneric, DerivingVia #-}
-import Network.RPC.Curryer.Server
-import Network.RPC.Curryer.Client
+import Network.RPC.Curryer.Server as S
+import Network.RPC.Curryer.Client as C
 import Criterion.Main
 import GHC.Generics
 import Control.Concurrent.MVar
@@ -15,10 +15,10 @@
 main = do
   --start server shared across benchmarks- gather stats on round-trip requests-responses
   portReadyMVar <- newEmptyMVar
-  server <- async (serveIPv4 benchmarkServerRequestHandlers () localHostAddr 0 (Just portReadyMVar))
+  server <- async (serveIPv4 benchmarkServerRequestHandlers () S.UnencryptedConnectionConfig localHostAddr 0 (Just portReadyMVar))
   --wait for server to be ready
   (SockAddrInet port _) <- takeMVar portReadyMVar
-  clientConn <- connectIPv4 [] localHostAddr port
+  clientConn <- connectIPv4 [] C.UnencryptedConnectionConfig localHostAddr port
 
   _ <- syncWaitRequest clientConn 100
   let syncWait ms = nfIO (syncWaitRequest clientConn ms)
diff --git a/curryer-rpc.cabal b/curryer-rpc.cabal
--- a/curryer-rpc.cabal
+++ b/curryer-rpc.cabal
@@ -1,5 +1,5 @@
 Name: curryer-rpc
-Version: 0.5.0
+Version: 0.5.1
 License: PublicDomain
 Build-Type: Simple
 Homepage: https://github.com/agentm/curryer
@@ -39,13 +39,14 @@
                      , time
                      , network-byte-order
                      , stm
-                     , tls >= 2.1.11
+                     , tls >= 2.1.12
                      , data-default
                      , streaming-commons
-                     , crypton-x509-store
-                     , crypton-x509-system
-                     , crypton-x509
-                     , asn1-types
+                     , crypton-x509-store >= 1.6.11
+                     , crypton-x509-system >= 1.6.7
+                     , crypton-x509 >= 1.7.7
+                     , crypton-asn1-types >= 0.4.1
+                     , unix >= 2.8.0.0
         Hs-Source-Dirs: ./src
         Default-Language: Haskell2010
         ghc-options: -Wall -fwarn-unused-binds -fwarn-unused-imports