diff --git a/runtime/Cargo.lock b/runtime/Cargo.lock
index 9db7cde..4e4032c 100644
--- a/runtime/Cargo.lock
+++ b/runtime/Cargo.lock
@@ -50,6 +50,12 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "bincode"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd6a120d2e16b3e1b4a24bd70f23b12d3e16b81f113364a26935f8db7245452d"
+
 [[package]]
 name = "bitflags"
 version = "2.13.0"
@@ -383,7 +389,7 @@ checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
 name = "penumbra-fhe-runtime"
 version = "0.0.0"
 dependencies = [
- "bincode",
+ "bincode 3.0.0",
  "serde",
  "serde_json",
  "tfhe",
@@ -601,7 +607,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f341a7a6fe90bf813ecb2b098f04c0e5bca82436ddd1b256e6f1ec68be58da52"
 dependencies = [
  "aligned-vec",
- "bincode",
+ "bincode 1.3.3",
  "blake3",
  "bytemuck",
  "dyn-stack",
@@ -666,7 +672,7 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "09fc6480b20057adbb99ec2cd510561f181863e57303a32bc2eca5c3ea163097"
 dependencies = [
- "bincode",
+ "bincode 1.3.3",
  "serde",
  "tfhe-versionable",
 ]
diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml
index 39ecf13..07c3b12 100644
--- a/runtime/Cargo.toml
+++ b/runtime/Cargo.toml
@@ -26,7 +26,7 @@ serde_json = "1"
 # own integer-API docs use bincode; the tfhe-native `safe_serialization` is unavailable here
 # (the integer-API types don't implement its `Named` trait). Keeping keys/ciphertext in a
 # compact binary format (not the human-readable IR JSON) — server keys are large.
-bincode = "1"
+bincode = "3"
 
 [dev-dependencies]
 # (placeholder for future test-only deps)