diff --git a/pkgs/development/ocaml-modules/cryptokit/default.nix b/pkgs/development/ocaml-modules/cryptokit/default.nix
index 59ba28be3c3..eb9fdd85e68 100644
--- a/pkgs/development/ocaml-modules/cryptokit/default.nix
+++ b/pkgs/development/ocaml-modules/cryptokit/default.nix
@@ -2,7 +2,8 @@
 
 buildDunePackage rec {
   pname = "cryptokit";
-  version = "1.17";
+  version = "1.18";
+  duneVersion = "3";
 
   minimalOCamlVersion = "4.08";
 
@@ -10,7 +11,7 @@ buildDunePackage rec {
     owner = "xavierleroy";
     repo = "cryptokit";
     rev = "release${lib.replaceStrings ["."] [""] version}";
-    sha256 = "sha256:1xi7kcigxkfridjas2zwldsfc21wi31cgln071sbmv4agh3dqbyw";
+    hash = "sha256-8ae8hroCSkp4O5vM/qVOhAnnJJ+uygMYm3ix5ytwtHU=";
   };
 
   # dont do autotools configuration, but do trigger findlib's preConfigure hook