diff --git a/CHANGELOG b/CHANGELOG
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,5 +1,13 @@
 # Changelog
 
+- 0.1.1 (2026-10-31)
+  * Bumps the ppad-aead and ppad-secp256k1 dependencies, to 0.3.7
+    and 0.5.9, which (along with ppad-fixed) under the llvm flag on
+    x86_64 are compiled with LLVM's x86 cmov converter off
+    (-optlc=-x86-cmov-converter=false). This library is compiled
+    likewise, as ppad-fixed's constant-time arithmetic can be inlined
+    into it.
+
 - 0.1.0 (2026-10-10)
   * Breaking: splits the post-handshake session into separate Sender
     and Receiver states, so one state can't serve both directions and
diff --git a/ppad-bolt8.cabal b/ppad-bolt8.cabal
--- a/ppad-bolt8.cabal
+++ b/ppad-bolt8.cabal
@@ -1,6 +1,6 @@
 cabal-version:      3.0
 name:               ppad-bolt8
-version:            0.1.0
+version:            0.1.1
 synopsis:           Encrypted and authenticated transport per BOLT #8
 license:            MIT
 license-file:       LICENSE
@@ -32,15 +32,21 @@
       -Wall
   if flag(llvm)
     ghc-options: -fllvm -O2
+  -- LLVM's x86 backend rewrites a cmov whose operand is a load as a
+  -- branch (its cmov converter), which would make the borrow-masked
+  -- correction of ppad-fixed's sub_mod# (inlinable here) a branch on
+  -- the borrow; keep the cmov.
+  if flag(llvm) && arch(x86_64)
+    ghc-options: -optlc=-x86-cmov-converter=false
   exposed-modules:
       Lightning.Protocol.BOLT8
   build-depends:
       base >= 4.9 && < 5
     , bytestring >= 0.9 && < 0.13
     , deepseq >= 1.4 && < 1.6
-    , ppad-aead >= 0.3.6 && < 0.4
+    , ppad-aead >= 0.3.7 && < 0.4
     , ppad-hkdf >= 0.3.2 && < 0.4
-    , ppad-secp256k1 >= 0.5.8 && < 0.6
+    , ppad-secp256k1 >= 0.5.9 && < 0.6
     , ppad-sha256 >= 0.3.2 && < 0.4
 
 test-suite bolt8-tests