diff --git a/crypto-policies.spec b/crypto-policies.spec
index 72503e3..2c7c6f2 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20240725
-%global git_commit 3de485cace4a8b42aa9b974f1ece54f03e29b603
+%global git_date 20240802
+%global git_commit 8cb6f2d3cc352133a23130c9f00e6fedcebacb1b
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -29,7 +29,7 @@ BuildRequires: python3-pytest
 BuildRequires: make
 
 Conflicts: openssl-libs < 1:3.2
-Conflicts: nss < 3.97
+Conflicts: nss < 3.101
 Conflicts: libreswan < 4.12
 Conflicts: openssh < 9.6p1-1
 Conflicts: gnutls < 3.8.3
@@ -198,6 +198,9 @@ rm -f "%{_sysconfdir}/crypto-policies/back-ends/javasystem.config" || :
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Fri Aug 02 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20240802-1.git8cb6f2d
+- nss: rewrite backend for nss 3.101
+
 * Thu Jul 25 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20240725-1.git3de485c
 - nss: wire KYBER768 to X25519-XYBER768D00
 - java: start controlling / disable DTLSv1.0
diff --git a/sources b/sources
index c0dbb5c..0ba2eff 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git3de485c.tar.gz) = 776b93d9c9ae30f2fa75ef2fefdb32b7df8d680bdd37375917a61c94055ec9195801d61992593dd9ce68f501c429478a7f7b9419d8964d97601ae82877c1a24c
+SHA512 (crypto-policies-git8cb6f2d.tar.gz) = c0146b4ccacfdc64d014790245c7f6c57f14a29e5552a80ae7eee04c7eec77a3f324d627daee3f288c85fc315004ae9c307355e1faeae28bddf57abbe526b4bf