diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,5 +1,10 @@
 # ChangeLog
 
+## 3.3.7
+
+* Using crypton instead of cryptonite.
+  [#931](https://github.com/yesodweb/wai/pull/931)
+
 ## 3.3.6
 
 * Setting FD_CLOEXEC on the listening socket.
diff --git a/Network/Wai/Handler/WarpTLS.hs b/Network/Wai/Handler/WarpTLS.hs
--- a/Network/Wai/Handler/WarpTLS.hs
+++ b/Network/Wai/Handler/WarpTLS.hs
@@ -44,12 +44,6 @@
     , OnInsecure (..)
     -- * Exception
     , WarpTLSException (..)
-    -- * DH parameters (re-exports)
-    --
-    -- | This custom DH parameters are not necessary anymore because
-    --   pre-defined DH parameters are supported in the TLS package.
-    , DH.Params
-    , DH.generateParams
     ) where
 
 import Control.Applicative ((<|>))
@@ -75,7 +69,6 @@
 import Network.Socket.BufferPool
 import Network.Socket.ByteString (sendAll)
 import qualified Network.TLS as TLS
-import qualified Crypto.PubKey.DH as DH
 import qualified Network.TLS.Extra as TLSExtra
 import qualified Network.TLS.SessionManager as SM
 import Network.Wai (Application)
diff --git a/Network/Wai/Handler/WarpTLS/Internal.hs b/Network/Wai/Handler/WarpTLS/Internal.hs
--- a/Network/Wai/Handler/WarpTLS/Internal.hs
+++ b/Network/Wai/Handler/WarpTLS/Internal.hs
@@ -8,7 +8,6 @@
     , getCertSettings
     ) where
 
-import qualified Crypto.PubKey.DH as DH
 import qualified Data.ByteString as S
 import qualified Data.ByteString.Lazy as L
 import qualified Data.IORef as I
@@ -105,9 +104,9 @@
     -- Default: def
     --
     -- Since 3.0.2
-  , tlsServerDHEParams :: Maybe DH.Params
+  , tlsServerDHEParams :: Maybe TLS.DHParams
     -- ^ Configuration for ServerDHEParams
-    -- more function lives in `cryptonite` package
+    -- more function lives in `crypton` package
     --
     -- Default: Nothing
     --
diff --git a/warp-tls.cabal b/warp-tls.cabal
--- a/warp-tls.cabal
+++ b/warp-tls.cabal
@@ -1,5 +1,5 @@
 Name:                warp-tls
-Version:             3.3.6
+Version:             3.3.7
 Synopsis:            HTTP over TLS support for Warp via the TLS package
 License:             MIT
 License-file:        LICENSE
@@ -23,8 +23,7 @@
                    , wai                           >= 3.2      && < 3.3
                    , warp                          >= 3.3.23   && < 3.4
                    , data-default-class            >= 0.0.1
-                   , tls                           >= 1.5.3
-                   , cryptonite                    >= 0.12
+                   , tls                           >= 1.7
                    , network                       >= 2.2.1
                    , streaming-commons
                    , tls-session-manager           >= 0.0.4