diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index b28171bf70..27c0845c77 100644
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -40,6 +40,7 @@
 #include <isc/attributes.h>
 #include <isc/base32.h>
 #include <isc/commandline.h>
+#include <isc/crypto.h>
 #include <isc/dir.h>
 #include <isc/file.h>
 #include <isc/hash.h>
diff --git a/bin/named/server.c b/bin/named/server.c
index 381997626b..9b3f170025 100644
--- a/bin/named/server.c
+++ b/bin/named/server.c
@@ -32,6 +32,7 @@
 #include <isc/attributes.h>
 #include <isc/base64.h>
 #include <isc/commandline.h>
+#include <isc/crypto.h>
 #include <isc/dir.h>
 #include <isc/file.h>
 #include <isc/hash.h>
diff --git a/lib/dns/opensslecdsa_link.c b/lib/dns/opensslecdsa_link.c
index 7bd3729b8b..9203cdba04 100644
--- a/lib/dns/opensslecdsa_link.c
+++ b/lib/dns/opensslecdsa_link.c
@@ -26,6 +26,7 @@
 #include <openssl/param_build.h>
 #endif
 
+#include <isc/crypto.h>
 #include <isc/md.h>
 #include <isc/mem.h>
 #include <isc/result.h>
diff --git a/lib/dns/openssleddsa_link.c b/lib/dns/openssleddsa_link.c
index 7ef6e495c5..f9f1a0bdf0 100644
--- a/lib/dns/openssleddsa_link.c
+++ b/lib/dns/openssleddsa_link.c
@@ -20,6 +20,7 @@
 #include <openssl/objects.h>
 #include <openssl/x509.h>
 
+#include <isc/crypto.h>
 #include <isc/mem.h>
 #include <isc/result.h>
 #include <isc/safe.h>
diff --git a/lib/isc/include/isc/md.h b/lib/isc/include/isc/md.h
index db95d1e84c..f8f89bba68 100644
--- a/lib/isc/include/isc/md.h
+++ b/lib/isc/include/isc/md.h
@@ -18,7 +18,6 @@
 
 #pragma once
 
-#include <isc/crypto.h>
 #include <isc/result.h>
 #include <isc/types.h>