diff --git a/Network/Wai/Handler/WarpTLS.hs b/Network/Wai/Handler/WarpTLS.hs
--- a/Network/Wai/Handler/WarpTLS.hs
+++ b/Network/Wai/Handler/WarpTLS.hs
@@ -1,3 +1,4 @@
+{-# LANGUAGE CPP #-}
 {-# LANGUAGE OverloadedStrings #-}
 {-# LANGUAGE RankNTypes #-}
 {-# LANGUAGE RecordWildCards #-}
@@ -46,6 +47,9 @@
 import Control.Exception (Exception, throwIO)
 import Data.Typeable (Typeable)
 import qualified Data.Conduit.Binary as CB
+#if MIN_VERSION_tls(1, 1, 3)
+import qualified Crypto.Random.AESCtr
+#endif
 
 data TLSSettings = TLSSettings
     { certFile :: FilePath
@@ -117,7 +121,11 @@
                     return bs
             if maybe False ((== 0x16) . fst) (firstBS >>= B.uncons)
                 then do
+#if MIN_VERSION_tls(1, 1, 3)
+                    gen <- Crypto.Random.AESCtr.makeSystem
+#else
                     gen <- makeSystem
+#endif
                     ctx <- TLS.contextNew
                         TLS.Backend
                             { TLS.backendFlush = return ()
diff --git a/warp-tls.cabal b/warp-tls.cabal
--- a/warp-tls.cabal
+++ b/warp-tls.cabal
@@ -1,5 +1,5 @@
 Name:                warp-tls
-Version:             1.4.1.3
+Version:             1.4.1.4
 Synopsis:            HTTP over SSL/TLS support for Warp via the TLS package
 License:             MIT
 License-file:        LICENSE
@@ -12,6 +12,9 @@
 Stability:           Stable
 Description:         HTTP over SSL/TLS support for Warp via the TLS package.
 
+flag tls_1_1_3
+    default: True
+
 Library
   Build-Depends:     base                          >= 4        && < 5
                    , bytestring                    >= 0.9
@@ -28,6 +31,12 @@
                    , crypto-random-api             >= 0.2
                    , network                       >= 2.2.1
                    , cprng-aes                     >= 0.3.4
+  if flag(tls_1_1_3)
+      build-depends: tls >= 1.1.3
+                   , cprng-aes >= 0.5.0
+  else
+      build-depends: tls < 1.1.3
+                   , cprng-aes < 0.5.0
   Exposed-modules:   Network.Wai.Handler.WarpTLS
   ghc-options:       -Wall