diff --git a/Cargo.lock b/Cargo.lock
index af787b3e..793a7493 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -972,9 +972,9 @@ dependencies = [
 
 [[package]]
 name = "pem"
-version = "1.0.2"
+version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e9a3b09a20e374558580a4914d3b7d89bd61b954a5a5e1dcbea98753addb1947"
+checksum = "a8835c273a76a90455d7344889b0964598e3316e2a79ede8e36f16bdcf2228b8"
 dependencies = [
  "base64",
 ]
diff --git a/tough-kms/Cargo.toml b/tough-kms/Cargo.toml
index 5e307771..6262480e 100644
--- a/tough-kms/Cargo.toml
+++ b/tough-kms/Cargo.toml
@@ -22,7 +22,7 @@ rusoto_credential = { version = "0.48", optional = true }
 rusoto_kms = { version = "0.48", optional = true, default-features = false }
 snafu = { version = "0.7", features = ["backtraces-impl-backtrace-crate"] }
 tokio = "1.8"
-pem = "1.0.2"
+pem = "1.1.1"
 
 [dev-dependencies]
 base64 = "0.13"
diff --git a/tough/Cargo.toml b/tough/Cargo.toml
index 4647b1b7..3c56ec6b 100644
--- a/tough/Cargo.toml
+++ b/tough/Cargo.toml
@@ -16,7 +16,7 @@ hex = "0.4.2"
 log = "0.4.8"
 olpc-cjson = { version = "0.1.0", path = "../olpc-cjson" }
 path-absolutize = "3"
-pem = "1.0.2"
+pem = "1.1.1"
 percent-encoding = "2"
 reqwest = { version = "0.11.1", optional = true, default-features = false, features = ["blocking"] }
 ring = { version = "0.16.16", features = ["std"] }
diff --git a/tuftool/Cargo.toml b/tuftool/Cargo.toml
index 04cc17d1..64587caa 100644
--- a/tuftool/Cargo.toml
+++ b/tuftool/Cargo.toml
@@ -21,7 +21,7 @@ hex = "0.4.2"
 log = "0.4.8"
 maplit = "1.0.1"
 olpc-cjson = { version = "0.1.0", path = "../olpc-cjson" }
-pem = "1.0.2"
+pem = "1.1.1"
 rayon = "1.5"
 reqwest = { version = "0.11.1", features = ["blocking"] }
 ring = { version = "0.16.16", features = ["std"] }