diff --git a/Cargo.lock b/Cargo.lock
index b405e8aacf..ab22fe815f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1172,7 +1172,7 @@ dependencies = [
  "num-traits",
  "quote",
  "ringbuf",
- "salty",
+ "salty 0.3.0",
  "serde",
  "sprockets-common",
  "sprockets-rot",
@@ -2603,7 +2603,7 @@ dependencies = [
  "lib-lpc55-usart",
  "lpc55-pac",
  "nb 1.0.0",
- "salty",
+ "salty 0.3.0",
  "serde",
  "serde-big-array 0.4.1",
  "sha3",
@@ -2717,7 +2717,7 @@ dependencies = [
  "lpc55_romapi",
  "nb 1.0.0",
  "ron",
- "salty",
+ "salty 0.3.0",
  "serde",
  "sha3",
  "stage0-handoff",
@@ -3480,6 +3480,16 @@ dependencies = [
  "zeroize",
 ]
 
+[[package]]
+name = "salty"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b947325a585e90733e0e9ec097228f40b637cc346f9bd68f84d5c6297d0fcfef"
+dependencies = [
+ "subtle",
+ "zeroize",
+]
+
 [[package]]
 name = "same-file"
 version = "1.0.6"
@@ -3788,7 +3798,7 @@ source = "git+https://github.com/oxidecomputer/sprockets.git#7c9bcb262cb11779597
 dependencies = [
  "derive_more",
  "hubpack",
- "salty",
+ "salty 0.2.0",
  "serde",
  "serde-big-array 0.4.1",
 ]
@@ -3801,7 +3811,7 @@ dependencies = [
  "corncobs",
  "derive_more",
  "hubpack",
- "salty",
+ "salty 0.2.0",
  "serde",
  "sprockets-common",
  "tinyvec",
@@ -5394,9 +5404,9 @@ dependencies = [
 
 [[package]]
 name = "zeroize"
-version = "1.5.7"
+version = "1.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c394b5bd0c6f669e7275d9c20aa90ae064cb22e75a1cad54e1b34088034b149f"
+checksum = "525b4ec142c6b68a2d10f01f7bbf6755599ca3f81ea53b8431b7dd348f5fdb2d"
 dependencies = [
  "zeroize_derive",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 81af64613e..57597aae2b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -123,7 +123,7 @@ idol-runtime = { git = "https://github.com/oxidecomputer/idolatry.git", default-
 lpc55_sign = { git = "https://github.com/oxidecomputer/lpc55_support", default-features = false }
 ordered-toml = { git = "https://github.com/oxidecomputer/ordered-toml", default-features = false }
 pmbus = { git = "https://github.com/oxidecomputer/pmbus", default-features = false }
-salty = { git = "https://github.com/oxidecomputer/salty", branch = "v0.2.0-zeroize", default-features = false }
+salty = { version = "0.3", default-features = false }
 spd = { git = "https://github.com/oxidecomputer/spd", default-features = false }
 sprockets-common = { git = "https://github.com/oxidecomputer/sprockets.git", default-features = false }
 sprockets-rot = { git = "https://github.com/oxidecomputer/sprockets.git", default-features = false }