diff --git a/CHANGES.md b/CHANGES.md
index debc2dfbf..b7ac73128 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,6 @@
+# HAP-Java 2.0.3
+* Upgrade bouncycastle dependencies to 1.72
+
 # HAP-Java 2.0.2
  * Various minor stability issues for after an accessory has been removed.
 
diff --git a/pom.xml b/pom.xml
index b682cf656..bd9677a6c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -105,10 +105,16 @@
 
 		<dependency>
 			<groupId>org.bouncycastle</groupId>
-			<artifactId>bcprov-jdk15on</artifactId>
-			<version>1.51</version>
+			<artifactId>bcprov-jdk18on</artifactId>
+			<version>1.72</version>
 		</dependency>
 
+                <dependency>
+                        <groupId>org.bouncycastle</groupId>
+                        <artifactId>bctls-jdk18on</artifactId>
+                        <version>1.72</version>
+                </dependency>
+
 		<dependency>
 			<groupId>net.vrallev.ecc</groupId>
 			<artifactId>ecc-25519-java</artifactId>
diff --git a/src/main/java/io/github/hapjava/server/impl/crypto/ChachaDecoder.java b/src/main/java/io/github/hapjava/server/impl/crypto/ChachaDecoder.java
index 4c74a469d..2268ddba8 100644
--- a/src/main/java/io/github/hapjava/server/impl/crypto/ChachaDecoder.java
+++ b/src/main/java/io/github/hapjava/server/impl/crypto/ChachaDecoder.java
@@ -5,8 +5,8 @@
 import org.bouncycastle.crypto.generators.Poly1305KeyGenerator;
 import org.bouncycastle.crypto.params.KeyParameter;
 import org.bouncycastle.crypto.params.ParametersWithIV;
-import org.bouncycastle.crypto.tls.AlertDescription;
-import org.bouncycastle.crypto.tls.TlsFatalAlert;
+import org.bouncycastle.tls.AlertDescription;
+import org.bouncycastle.tls.TlsFatalAlert;
 import org.bouncycastle.util.Arrays;
 
 public class ChachaDecoder {