diff --git a/core/lib/Cargo.toml b/core/lib/Cargo.toml
index cd7055b9..fc72d595 100644
--- a/core/lib/Cargo.toml
+++ b/core/lib/Cargo.toml
@@ -26,7 +26,7 @@ workspace = true
 default = ["http2", "tokio-macros", "trace"]
 http2 = ["hyper/http2", "hyper-util/http2"]
 http3-preview = ["s2n-quic", "s2n-quic-h3", "tls"]
-secrets = ["cookie/private", "cookie/key-expansion"]
+secrets = ["cookie/private", "cookie/key-expansion", "chacha20poly1305", "hkdf", "sha2", "base64", "hex"]
 json = ["serde_json"]
 msgpack = ["rmp-serde"]
 uuid = ["uuid_", "rocket_http/uuid"]
@@ -44,6 +44,13 @@ uuid_ = { package = "uuid", version = "1", optional = true, features = ["serde"]
 # Optional MTLS dependencies
 x509-parser = { version = "0.16", optional = true }
 
+# Optional dependencies for "secrets" feature
+chacha20poly1305 = { version = "0.10.1", optional = true }
+hkdf = { version = "0.12.4", optional = true }
+sha2 = { version = "0.10.8", optional = true }
+base64 = { version = "0.22.1", optional = true }
+hex = { version = "0.4.3", optional = true }
+
 # Hyper dependencies
 http = "1"
 bytes = "1.4"
@@ -74,11 +81,6 @@ tokio-stream = { version = "0.1.6", features = ["signal", "time"] }
 cookie = { version = "0.18", features = ["percent-encode"] }
 futures = { version = "0.3.30", default-features = false, features = ["std"] }
 state = "0.6"
-chacha20poly1305 = "0.10.1"
-hkdf = "0.12.4"
-sha2 = "0.10.8"
-base64 = "0.22.1"
-hex = "0.4.3"
 
 # tracing
 tracing = { version = "0.1.40", default-features = false, features = ["std", "attributes"] }