diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+# v1.0.1.13
+
+## Non-breaking
+
+- Migrated the `crypton` dependency from the `0.34`-`1.x` line to `2.0.1`, which replaces its internal `memory` dependency with `ram`/`base16`. `Pqi.Native.Auth`'s MD5 and SCRAM-SHA-256 logic (`Crypto.Hash`, `Crypto.KDF.PBKDF2`, `Crypto.MAC.HMAC`, `Crypto.Random`) needed no source changes; verified `hashWith`, `hmac`, and `fastPBKDF2_SHA256` still reproduce known MD5/SHA-256/HMAC-SHA256/PBKDF2 test vectors under `crypton-2.0.1`.
+
 # v1.0.1.12
 
 ## Fixes
diff --git a/pqi-native.cabal b/pqi-native.cabal
--- a/pqi-native.cabal
+++ b/pqi-native.cabal
@@ -1,6 +1,6 @@
 cabal-version: 3.0
 name: pqi-native
-version: 1.0.1.12
+version: 1.0.1.13
 category: Database, PostgreSQL
 synopsis: Native (pure-Haskell) adapter for pqi
 description:
@@ -139,7 +139,7 @@
     base64-bytestring >=1.2 && <1.3,
     bytestring >=0.10 && <0.13,
     containers >=0.6 && <0.9,
-    crypton >=0.34 && <2,
+    crypton >=2.0.1 && <2.1,
     pqi ^>=1.1,
     pqi-native:transport,
     ptr-peeker ^>=0.2,