diff --git a/chacha20poly1305/src/lib.rs b/chacha20poly1305/src/lib.rs
index 1be90044..55999fc9 100644
--- a/chacha20poly1305/src/lib.rs
+++ b/chacha20poly1305/src/lib.rs
@@ -112,7 +112,7 @@
 //! proof from the XSalsa20 paper to the construction in order to demonstrate
 //! that XChaCha20 is secure if ChaCha20 is secure (see Section 3.1):
 //!
-//! <https://tools.ietf.org/html/draft-arciszewski-xchacha-03>
+//! <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-xchacha>
 //!
 //! It is worth noting that NaCl/libsodium's default "secretbox" algorithm is
 //! XSalsa20Poly1305, not XChaCha20Poly1305, and thus not compatible with
diff --git a/chacha20poly1305/tests/lib.rs b/chacha20poly1305/tests/lib.rs
index 2bd8d0a1..9bc0d983 100644
--- a/chacha20poly1305/tests/lib.rs
+++ b/chacha20poly1305/tests/lib.rs
@@ -138,7 +138,7 @@ mod chacha20 {
 
 /// XChaCha20Poly1305 test vectors.
 ///
-/// From <https://tools.ietf.org/html/draft-arciszewski-xchacha-03#appendix-A.1>
+/// From <https://datatracker.ietf.org/doc/html/draft-irtf-cfrg-xchacha#appendix-A.1>
 mod xchacha20 {
     use super::{AAD, KEY, PLAINTEXT};
     use chacha20poly1305::aead::array::Array;