diff --git a/Cargo.lock b/Cargo.lock
index 01f6613..d4691cd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -451,7 +451,7 @@ dependencies = [
  "rfc6979",
  "sha1",
  "sha2",
- "signature 3.0.0",
+ "signature",
  "zeroize",
 ]
 
@@ -466,7 +466,7 @@ dependencies = [
  "rfc6979",
  "serdect",
  "sha2",
- "signature 3.0.0",
+ "signature",
  "spki",
  "zeroize",
 ]
@@ -478,7 +478,7 @@ dependencies = [
  "hex-literal",
  "pkcs8",
  "serdect",
- "signature 3.0.0",
+ "signature",
  "zerocopy",
  "zeroize",
 ]
@@ -491,7 +491,7 @@ dependencies = [
  "pkcs8",
  "serde",
  "serde_bytes",
- "signature 3.0.0",
+ "signature",
  "zeroize",
 ]
 
@@ -785,7 +785,7 @@ dependencies = [
  "hybrid-array",
  "rand_core 0.10.1",
  "sha2",
- "signature 3.0.0",
+ "signature",
  "static_assertions",
  "typenum",
  "zeroize",
@@ -830,7 +830,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha3",
- "signature 3.0.0",
+ "signature",
  "zeroize",
 ]
 
@@ -1332,12 +1332,6 @@ dependencies = [
  "keccak",
 ]
 
-[[package]]
-name = "signature"
-version = "2.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
-
 [[package]]
 name = "signature"
 version = "3.0.0"
@@ -1372,7 +1366,7 @@ dependencies = [
  "serde_json",
  "sha2",
  "sha3",
- "signature 3.0.0",
+ "signature",
  "typenum",
  "zerocopy",
  "zeroize",
@@ -1746,7 +1740,7 @@ dependencies = [
  "serdect",
  "sha2",
  "sha3",
- "signature 2.2.0",
+ "signature",
  "spki",
  "subtle",
  "thiserror",
diff --git a/xmss/Cargo.toml b/xmss/Cargo.toml
index cb76903..c44c024 100644
--- a/xmss/Cargo.toml
+++ b/xmss/Cargo.toml
@@ -30,7 +30,7 @@ rand = "0.10"
 sha2 = "0.11"
 sha3 = "0.11"
 serdect = { version = "0.4", features = ["alloc"], optional = true }
-signature = "2"
+signature = "3"
 spki = { version = "0.8", optional = true, default-features = false, features = ["alloc"] }
 subtle = "2.6"
 thiserror = "2"