diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index 3643f165..8372c998 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -60,9 +60,9 @@ dependencies = [
 
 [[package]]
 name = "aes-gcm"
-version = "0.11.0-rc.4"
+version = "0.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da8c919c118108f144adecad74b425b804ad075580d605d9b33c2d6d1c62a2f8"
+checksum = "fdf011db2e21ce0d575593d749db5554b47fed37aff429e4dc50bc91ac93a028"
 dependencies = [
  "aead 0.6.0",
  "aes 0.9.1",
@@ -77,7 +77,7 @@ name = "aethernet-protocol"
 version = "1.0.0"
 dependencies = [
  "aes 0.9.1",
- "aes-gcm 0.11.0-rc.4",
+ "aes-gcm 0.11.0",
  "async-trait",
  "base64",
  "bytes",
diff --git a/rust/Cargo.toml b/rust/Cargo.toml
index 4826134c..2607c061 100644
--- a/rust/Cargo.toml
+++ b/rust/Cargo.toml
@@ -28,7 +28,7 @@ ed25519-dalek = "2.1"
 # Legacy P-256 (secp256r1) ECDSA verify for the Ed25519 migration fallback (spec §7.5).
 p256 = { version = "0.13", features = ["ecdsa", "pkcs8"] }
 x25519-dalek = { version = "2.0", features = ["static_secrets"] }
-aes-gcm = "=0.11.0-rc.4"
+aes-gcm = "=0.11.0"
 # AES-128-ECB single-block for the BLE "ah" RPA hash (security::ble_privacy).
 # Same RustCrypto rc family as aes-gcm 0.11.0-rc.4 (which depends on aes 0.9.x),
 # so Cargo resolves to one shared `aes`/`cipher` version — no duplicate tree.