diff --git a/crypto-policies.spec b/crypto-policies.spec
index d7b4667..11361ca 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20221215
-%global git_commit ece0092078a87593c01b127cdb2368877ce11d01
+%global git_date 20230731
+%global git_commit 3177e06c203c082d479760337c7cad65a4dcc81e
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -188,6 +188,11 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Tue Jul 31 2023 Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git3177e06
+- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
+- krb5: fix policy generator to account for macs
+- docs: replace `FIPS 140-2` with just `FIPS 140`
+
 * Thu Dec 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
 - bind: expand the list of disableable algorithms
 - tests/java: fix java.security.disableSystemPropertiesFile=true
diff --git a/sources b/sources
index 4888842..1cd4cda 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-gitece0092.tar.gz) = 389f13272628dc49689eba85bca5d256c66e5c72a0a6d127fc1f257d2fad21f7ea7dc9374d6a6d1e47a24cffa330d48e33bd51c345fa91b8abaf222810ca9a45
+SHA512 (crypto-policies-git3177e06.tar.gz) = 1efa0366a5719c8bac3d1bc0178a03938f715f8e2faf1eb14b699a1fec2d4dfeb1b2b60af0d12337c60ffc74c1e2610bf76162ceae8dde14ac4dc074b23adc39