diff --git a/Data/Conduit/Network/TLS.hs b/Data/Conduit/Network/TLS.hs
--- a/Data/Conduit/Network/TLS.hs
+++ b/Data/Conduit/Network/TLS.hs
@@ -44,6 +44,9 @@
 #endif
 import Network.Socket (Socket)
 import qualified Data.ByteString as S
+#if MIN_VERSION_tls(1, 1, 3)
+import qualified Crypto.Random.AESCtr
+#endif
 
 tlsConfig :: HostPreference
           -> Int -- ^ port
@@ -70,7 +73,9 @@
         return ()
       where
         handle socket addr mlocal = do
-#if MIN_VERSION_tls(1, 1, 0)
+#if MIN_VERSION_tls(1, 1, 3)
+            gen <- Crypto.Random.AESCtr.makeSystem
+#elif MIN_VERSION_tls(1, 1, 0)
             gen <- getSystemRandomGen
 #else
             gen <- newGenIO
@@ -85,7 +90,11 @@
                     , TLS.backendRecv = recvExact socket
                     }
                 params
+#if MIN_VERSION_tls(1, 1, 3)
+                gen
+#else
                 (gen :: SystemRandom)
+#endif
 #else
             ctx <- TLS.serverWith
                 params
diff --git a/network-conduit-tls.cabal b/network-conduit-tls.cabal
--- a/network-conduit-tls.cabal
+++ b/network-conduit-tls.cabal
@@ -1,5 +1,5 @@
 name:                network-conduit-tls
-version:             1.0.1
+version:             1.0.1.1
 synopsis:            Create TLS-aware network code with conduits
 description:         Uses the tls package for a pure-Haskell implementation.
 homepage:            https://github.com/snoyberg/conduit
@@ -29,3 +29,4 @@
                     , tls-extra       >= 0.4
                     , crypto-api      >= 0.10
                     , crypto-random-api >= 0.2
+                    , cprng-aes