diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,3 +1,12 @@
+## 3.2.1
+
+* Removing dependency to cprng-aes.
+
+## 3.2.0
+
+* Major version up due to breaking changes.
+* runHTTP2TLS and runHTTP2TLSSocket were removed.
+
 ## 3.1.4
 
 * Add an option to disable HTTP2 [#450](https://github.com/yesodweb/wai/pull/450)
diff --git a/Network/Wai/Handler/WarpTLS.hs b/Network/Wai/Handler/WarpTLS.hs
--- a/Network/Wai/Handler/WarpTLS.hs
+++ b/Network/Wai/Handler/WarpTLS.hs
@@ -46,7 +46,6 @@
 import Control.Exception (Exception, throwIO, bracket, finally, handle, fromException, try, IOException, onException, SomeException(..))
 import qualified Control.Exception as E
 import Control.Monad (void)
-import qualified Crypto.Random.AESCtr
 import qualified Data.ByteString as S
 import qualified Data.ByteString.Lazy as L
 import Data.Default.Class (def)
@@ -310,12 +309,7 @@
 httpOverTls :: TLS.TLSParams params => TLSSettings -> Socket -> S.ByteString -> params -> IO (Connection, Transport)
 httpOverTls TLSSettings{..} s bs0 params = do
     recvN <- makePlainReceiveN s bs0
-#if MIN_VERSION_tls(1,3,0)
     ctx <- TLS.contextNew (backend recvN) params
-#else
-    gen <- Crypto.Random.AESCtr.makeSystem
-    ctx <- TLS.contextNew (backend recvN) params gen
-#endif
     TLS.contextHookSetLogging ctx tlsLogging
     TLS.handshake ctx
     writeBuf <- allocateBuffer bufferSize
diff --git a/warp-tls.cabal b/warp-tls.cabal
--- a/warp-tls.cabal
+++ b/warp-tls.cabal
@@ -1,5 +1,5 @@
 Name:                warp-tls
-Version:             3.2.0
+Version:             3.2.1
 Synopsis:            HTTP over TLS support for Warp via the TLS package
 License:             MIT
 License-file:        LICENSE
@@ -24,7 +24,6 @@
                    , data-default-class            >= 0.0.1
                    , tls                           >= 1.3.2
                    , network                       >= 2.2.1
-                   , cprng-aes                     >= 0.5.0
                    , streaming-commons
   Exposed-modules:   Network.Wai.Handler.WarpTLS
   ghc-options:       -Wall