diff --git a/nettle/.footprint b/nettle/.footprint
index 317fbaa12..b9144e127 100644
--- a/nettle/.footprint
+++ b/nettle/.footprint
@@ -11,6 +11,7 @@ drwxr-xr-x	root/root	usr/include/nettle/
 -rw-r--r--	root/root	usr/include/nettle/arcfour.h
 -rw-r--r--	root/root	usr/include/nettle/arctwo.h
 -rw-r--r--	root/root	usr/include/nettle/asn1.h
+-rw-r--r--	root/root	usr/include/nettle/balloon.h
 -rw-r--r--	root/root	usr/include/nettle/base16.h
 -rw-r--r--	root/root	usr/include/nettle/base64.h
 -rw-r--r--	root/root	usr/include/nettle/bignum.h
@@ -51,6 +52,7 @@ drwxr-xr-x	root/root	usr/include/nettle/
 -rw-r--r--	root/root	usr/include/nettle/nettle-meta.h
 -rw-r--r--	root/root	usr/include/nettle/nettle-types.h
 -rw-r--r--	root/root	usr/include/nettle/nist-keywrap.h
+-rw-r--r--	root/root	usr/include/nettle/ocb.h
 -rw-r--r--	root/root	usr/include/nettle/pbkdf2.h
 -rw-r--r--	root/root	usr/include/nettle/pgp.h
 -rw-r--r--	root/root	usr/include/nettle/pkcs1.h
@@ -68,7 +70,9 @@ drwxr-xr-x	root/root	usr/include/nettle/
 -rw-r--r--	root/root	usr/include/nettle/sha2.h
 -rw-r--r--	root/root	usr/include/nettle/sha3.h
 -rw-r--r--	root/root	usr/include/nettle/siv-cmac.h
+-rw-r--r--	root/root	usr/include/nettle/siv-gcm.h
 -rw-r--r--	root/root	usr/include/nettle/sm3.h
+-rw-r--r--	root/root	usr/include/nettle/sm4.h
 -rw-r--r--	root/root	usr/include/nettle/streebog.h
 -rw-r--r--	root/root	usr/include/nettle/twofish.h
 -rw-r--r--	root/root	usr/include/nettle/umac.h
@@ -77,13 +81,13 @@ drwxr-xr-x	root/root	usr/include/nettle/
 -rw-r--r--	root/root	usr/include/nettle/yarrow.h
 drwxr-xr-x	root/root	usr/lib/
 -rw-r--r--	root/root	usr/lib/libhogweed.a
-lrwxrwxrwx	root/root	usr/lib/libhogweed.so -> libhogweed.so.6.6
-lrwxrwxrwx	root/root	usr/lib/libhogweed.so.6 -> libhogweed.so.6.6
--rw-r--r--	root/root	usr/lib/libhogweed.so.6.6
+lrwxrwxrwx	root/root	usr/lib/libhogweed.so -> libhogweed.so.6.7
+lrwxrwxrwx	root/root	usr/lib/libhogweed.so.6 -> libhogweed.so.6.7
+-rw-r--r--	root/root	usr/lib/libhogweed.so.6.7
 -rw-r--r--	root/root	usr/lib/libnettle.a
-lrwxrwxrwx	root/root	usr/lib/libnettle.so -> libnettle.so.8.6
-lrwxrwxrwx	root/root	usr/lib/libnettle.so.8 -> libnettle.so.8.6
--rw-r--r--	root/root	usr/lib/libnettle.so.8.6
+lrwxrwxrwx	root/root	usr/lib/libnettle.so -> libnettle.so.8.7
+lrwxrwxrwx	root/root	usr/lib/libnettle.so.8 -> libnettle.so.8.7
+-rw-r--r--	root/root	usr/lib/libnettle.so.8.7
 drwxr-xr-x	root/root	usr/lib/pkgconfig/
 -rw-r--r--	root/root	usr/lib/pkgconfig/hogweed.pc
 -rw-r--r--	root/root	usr/lib/pkgconfig/nettle.pc
diff --git a/nettle/.signature b/nettle/.signature
index 6879d2718..71e163302 100644
--- a/nettle/.signature
+++ b/nettle/.signature
@@ -1,5 +1,5 @@
 untrusted comment: verify with /etc/ports/opt.pub
-RWSE3ohX2g5d/bcBiFcNKlTGHguTGVDi1mXU+/dcKVIMRC44cr+hMqlNKjfHm+0NEZQQLPH/a9CySOTn16r68nFqT/TqXBBGhAU=
-SHA256 (Pkgfile) = 7c0ab4e2dc87880cc6646d7a1a30c78ba7e937d80afc5e853fefb3c1f66742c1
-SHA256 (.footprint) = 643960ca9c7f9e4fe0c196cdfef040305645553e28346e39dbd6872335bd0b1b
-SHA256 (nettle-3.8.1.tar.gz) = 364f3e2b77cd7dcde83fd7c45219c834e54b0c75e428b6f894a23d12dd41cbfe
+RWSE3ohX2g5d/axs7wUMfU1OiqVfNsFjDMHt1socMa4R0YfEz9RBOd3WUvUrxhIG27f019LAtCLuk5T+29n7Up9MPruwDGQnkg4=
+SHA256 (Pkgfile) = 78b9b0c52c069ea6d2af7b204721d40f6b87d327fd39bd38cae7501246276775
+SHA256 (.footprint) = dc9832616bdea3d219574a53df5f209acbc5b35c57c2fe259df8d8f7a33bf362
+SHA256 (nettle-3.9.tar.gz) = 0ee7adf5a7201610bb7fe0acbb7c9b3be83be44904dd35ebbcd965cd896bfeaa
diff --git a/nettle/Pkgfile b/nettle/Pkgfile
index b0da8485f..2db939303 100644
--- a/nettle/Pkgfile
+++ b/nettle/Pkgfile
@@ -4,7 +4,7 @@
 # Depends on: libgmp
 
 name=nettle
-version=3.8.1
+version=3.9
 release=1
 source=(https://ftp.gnu.org/gnu/$name/$name-$version.tar.gz)