diff --git a/CHANGELOG.md b/CHANGELOG.md
index f4013ec..a0eccf7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ SPDX-License-Identifier: CC0-1.0
 
 # Changelog
 
+## Unreleased
+
+- Use `trussed-chunked` and `trussed-wrap-key-to-file` instead of
+  `trussed-staging`, see [trussed-staging#19][].
+
+[trussed-staging#19]: https://github.com/trussed-dev/trussed-staging/pull/19
 
 ## [v1.3.0][] (2023-12-01)
 
diff --git a/Cargo.toml b/Cargo.toml
index b36b20e..3671b23 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -31,8 +31,9 @@ log = "0.4"
 serde = { version = "1.0", default-features = false }
 subtle = { version = "2.4.1", default-features = false }
 trussed = "0.1.0"
+trussed-chunked = { version = "0.1.0", features = ["encrypted-chunked"] }
 trussed-rsa-alloc = { version = "0.1.0", optional = true }
-trussed-staging = { version = "0.1.0", features = ["wrap-key-to-file", "chunked", "encrypted-chunked"]}
+trussed-wrap-key-to-file = "0.1.0"
 serde_repr = "0.1"
 hex-literal = "0.4.1"
 trussed-auth = "0.2.1"
@@ -94,12 +95,14 @@ littlefs2 = { git = "https://github.com/trussed-dev/littlefs2.git", rev = "ebd27
 p256-cortex-m4 = { git = "https://github.com/Nitrokey/p256-cortex-m4", tag = "v0.1.0-alpha.6-nitrokey-1" }
 trussed = { git = "https://github.com/Nitrokey/trussed" , tag = "v0.1.0-nitrokey.18" }
 trussed-auth = { git = "https://github.com/trussed-dev/trussed-auth.git", rev = "4b8191f248c26cb074cdac887c7f3f48f9c449a4"}
+trussed-chunked = { git = "https://github.com/Nitrokey/trussed-staging.git", branch = "extensions" }
+trussed-manage = { git = "https://github.com/Nitrokey/trussed-staging.git", branch = "extensions" }
 trussed-rsa-alloc = { git = "https://github.com/trussed-dev/trussed-rsa-backend.git", rev = "9732a9a3e98af72112286afdc9b7174c66c2869a" }
-trussed-staging = { git = "https://github.com/Nitrokey/trussed-staging.git", tag = "v0.1.0-nitrokey-hmac256p256.3" }
+trussed-wrap-key-to-file = { git = "https://github.com/Nitrokey/trussed-staging.git", branch = "extensions" }
 apdu-dispatch = { git = "https://github.com/Nitrokey/apdu-dispatch", tag = "v0.1.2-nitrokey.2" }
 trussed-usbip = { git = "https://github.com/Nitrokey/pc-usbip-runner.git", tag = "v0.0.1-nitrokey.1" }
 usbd-ccid = { git = "https://github.com/Nitrokey/usbd-ccid", tag = "v0.2.0-nitrokey.1" }
-admin-app = { git = "https://github.com/Nitrokey/admin-app.git", rev = "410899311ae7b194360366ff477f74d4d278e056" }
+admin-app = { git = "https://github.com/Nitrokey/admin-app.git", branch = "extensions" }
 ctaphid-dispatch = { git = "https://github.com/trussed-dev/ctaphid-dispatch.git", rev = "57cb3317878a8593847595319aa03ef17c29ec5b" }
 
 [package.metadata.docs.rs]
diff --git a/src/card.rs b/src/card.rs
index 1d0048f..8319732 100644
--- a/src/card.rs
+++ b/src/card.rs
@@ -8,7 +8,7 @@ use hex_literal::hex;
 use iso7816::Status;
 use trussed::types::Location;
 use trussed_auth::AuthClient;
-use trussed_staging::streaming::ChunkedClient;
+use trussed_chunked::ChunkedClient;
 
 pub(crate) mod reply;
 
@@ -356,7 +356,7 @@ mod tests {
     }
 }
 
-use trussed_staging::wrap_key_to_file::WrapKeyToFileClient;
+use trussed_wrap_key_to_file::WrapKeyToFileClient;
 
 /// Super trait with all trussed extensions required by opcard
 pub trait Client: trussed::Client + AuthClient + WrapKeyToFileClient + ChunkedClient {}
diff --git a/src/state.rs b/src/state.rs
index 07f9269..7248203 100644
--- a/src/state.rs
+++ b/src/state.rs
@@ -13,7 +13,7 @@ use trussed::api::reply::Metadata;
 use trussed::config::MAX_MESSAGE_LENGTH;
 use trussed::types::{KeyId, Location, Mechanism, PathBuf, StorageAttributes};
 use trussed::{syscall, try_syscall};
-use trussed_staging::streaming::utils::{write_all, EncryptionData};
+use trussed_chunked::utils::{write_all, EncryptionData};
 
 use crate::card::reply::Reply;
 use crate::command::{Password, PasswordMode};