diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index eca8573e..cbfa11a0 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -108,6 +108,6 @@ ext.storage_libs = [
     // https://github.com/google/tink/releases
     com_google_crypto_tink_android: dependencies.create('com.google.crypto.tink:tink-android') {
         // careful with upgrading tink, so old backups continue to be decryptable
-        version { strictly '1.7.0' }
+        version { strictly '1.10.0' }
     },
 ]
diff --git a/storage/lib/Android.bp b/storage/lib/Android.bp
index 227fecfb..d28d5c87 100644
--- a/storage/lib/Android.bp
+++ b/storage/lib/Android.bp
@@ -46,6 +46,6 @@ android_library {
 
 java_import {
     name: "seedvault-lib-tink-android",
-    jars: ["libs/tink-android-1.7.0.jar"],
+    jars: ["libs/tink-android-1.10.0.jar"],
     sdk_version: "current",
 }
diff --git a/storage/lib/libs/tink-android-1.10.0.jar b/storage/lib/libs/tink-android-1.10.0.jar
new file mode 100644
index 00000000..2a370011
Binary files /dev/null and b/storage/lib/libs/tink-android-1.10.0.jar differ
diff --git a/storage/lib/libs/tink-android-1.7.0.jar b/storage/lib/libs/tink-android-1.7.0.jar
deleted file mode 100644
index 5bb1c7d8..00000000
Binary files a/storage/lib/libs/tink-android-1.7.0.jar and /dev/null differ