diff --git a/.github/workflows/ci_codebuild-tests.yml b/.github/workflows/ci_codebuild-tests.yml
index 79a5841e0..1133ad3c3 100644
--- a/.github/workflows/ci_codebuild-tests.yml
+++ b/.github/workflows/ci_codebuild-tests.yml
@@ -38,10 +38,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run python-${{ matrix.python.python_version }} ${{ matrix.codebuild_file_name }}
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py${{ matrix.python.python_version }}/${{ matrix.codebuild_file_name }}
diff --git a/.github/workflows/ci_codebuild_batch.yml b/.github/workflows/ci_codebuild_batch.yml
index 34a12c44d..e8ad73bb9 100644
--- a/.github/workflows/ci_codebuild_batch.yml
+++ b/.github/workflows/ci_codebuild_batch.yml
@@ -22,10 +22,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/integ.yml
@@ -40,10 +40,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/examples.yml
@@ -58,10 +58,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/decrypt_dafny_esdk_vectors.yml
@@ -76,10 +76,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/decrypt_net_401_vectors.yml
@@ -94,10 +94,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/encrypt_masterkey.yml
@@ -112,10 +112,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/generate_decrypt_vectors_masterkey.yml
@@ -131,10 +131,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/decrypt_masterkey_with_masterkey.yml
@@ -150,10 +150,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py38/decrypt_masterkey_with_js.yml
@@ -169,10 +169,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/integ.yml
@@ -187,10 +187,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/examples.yml
@@ -205,10 +205,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/decrypt_dafny_esdk_vectors.yml
@@ -223,10 +223,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/decrypt_net_401_vectors.yml
@@ -241,10 +241,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/encrypt_masterkey.yml
@@ -259,10 +259,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/generate_decrypt_vectors_masterkey.yml
@@ -278,10 +278,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/decrypt_masterkey_with_masterkey.yml
@@ -297,10 +297,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py39/decrypt_masterkey_with_js.yml
@@ -316,10 +316,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/integ.yml
@@ -334,10 +334,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/examples.yml
@@ -352,10 +352,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/decrypt_dafny_esdk_vectors.yml
@@ -370,10 +370,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/decrypt_net_401_vectors.yml
@@ -388,10 +388,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/encrypt_masterkey.yml
@@ -406,10 +406,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/generate_decrypt_vectors_masterkey.yml
@@ -425,10 +425,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/decrypt_masterkey_with_masterkey.yml
@@ -444,10 +444,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py310/decrypt_masterkey_with_js.yml
@@ -463,10 +463,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/integ.yml
@@ -481,10 +481,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/integ_mpl.yml
@@ -499,10 +499,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/performance_tests_mpl.yml
@@ -517,10 +517,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/examples.yml
@@ -535,10 +535,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/examples_mpl.yml
@@ -553,10 +553,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_dafny_esdk_vectors_masterkey.yml
@@ -571,10 +571,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
@@ -589,10 +589,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_net_401_vectors_masterkey.yml
@@ -607,10 +607,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_net_401_vectors_keyrings.yml
@@ -625,10 +625,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/encrypt_masterkey.yml
@@ -643,10 +643,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/encrypt_keyrings.yml
@@ -661,10 +661,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/generate_decrypt_vectors_masterkey.yml
@@ -680,10 +680,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_masterkey_with_masterkey.yml
@@ -699,10 +699,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_masterkey_with_keyrings.yml
@@ -718,10 +718,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_masterkey_with_js.yml
@@ -736,10 +736,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/generate_decrypt_vectors_keyrings.yml
@@ -755,10 +755,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_keyrings_with_masterkey.yml
@@ -774,10 +774,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_keyrings_with_keyrings.yml
@@ -793,10 +793,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_keyrings_with_js.yml
@@ -811,10 +811,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_golden_manifest_with_keyrings.yml
@@ -829,10 +829,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py311/decrypt_golden_manifest_with_masterkey.yml
@@ -848,10 +848,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/integ.yml
@@ -866,10 +866,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/integ_mpl.yml
@@ -884,10 +884,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/performance_tests_mpl.yml
@@ -902,10 +902,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/examples.yml
@@ -920,10 +920,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/examples_mpl.yml
@@ -938,10 +938,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_dafny_esdk_vectors_masterkey.yml
@@ -956,10 +956,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_dafny_esdk_vectors_keyrings.yml
@@ -974,10 +974,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_net_401_vectors_masterkey.yml
@@ -992,10 +992,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_net_401_vectors_keyrings.yml
@@ -1010,10 +1010,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/encrypt_masterkey.yml
@@ -1028,10 +1028,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/encrypt_keyrings.yml
@@ -1046,10 +1046,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/generate_decrypt_vectors_masterkey.yml
@@ -1065,10 +1065,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_masterkey_with_masterkey.yml
@@ -1084,10 +1084,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_masterkey_with_keyrings.yml
@@ -1103,10 +1103,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_masterkey_with_js.yml
@@ -1121,10 +1121,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/generate_decrypt_vectors_keyrings.yml
@@ -1140,10 +1140,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_keyrings_with_masterkey.yml
@@ -1159,10 +1159,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_keyrings_with_keyrings.yml
@@ -1178,10 +1178,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_keyrings_with_js.yml
@@ -1196,10 +1196,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/generate_hkeyring_decrypt_vectors.yml
@@ -1215,10 +1215,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_hkeyring_with_masterkey.yml
@@ -1234,10 +1234,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_hkeyring_with_keyrings.yml
@@ -1253,10 +1253,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_hkeyring_with_net.yml
@@ -1271,10 +1271,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_golden_manifest_with_keyrings.yml
@@ -1289,10 +1289,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/py312/decrypt_golden_manifest_with_masterkey.yml
@@ -1308,10 +1308,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/coverage/coverage.yml
@@ -1325,10 +1325,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/coverage/coverage_mpl.yml
@@ -1343,10 +1343,10 @@ jobs:
         with:
           role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
           aws-region: us-west-2
-          role-duration-seconds: 4200
+          role-duration-seconds: 7200
       - name: Run CodeBuild
         uses: aws-actions/aws-codebuild-run-build@v1
-        timeout-minutes: 70
+        timeout-minutes: 120
         with:
           project-name: python-esdk
           buildspec-override: codebuild/compliance/compliance.yml
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index c9ba4ef56..8ffa14601 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,17 @@
 Changelog
 *********
 
+4.0.2 -- 2025-06-30
+===================
+
+Maintenance
+-----------
+* deps: Extend supported `MPL`_ versions to include v1.11.0
+  `#763 <https://github.com/aws/aws-encryption-sdk-python/pull/763>`_
+
+  MPL v1.11.0 contains performance improvements for the hierarchical keyring and
+  extends the range of supported `cryptography` versions.
+
 4.0.1 -- 2025-03-26
 ===================
 
diff --git a/README.rst b/README.rst
index ebc71fa85..daa345b02 100644
--- a/README.rst
+++ b/README.rst
@@ -42,7 +42,7 @@ Required Prerequisites
 Recommended Prerequisites
 =========================
 
-* aws-cryptographic-material-providers: == 1.10.0
+* aws-cryptographic-material-providers: == 1.11.0
     * Requires Python 3.11+.
 
 Installation
diff --git a/codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml b/codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
index 384f24fed..bc7086d96 100644
--- a/codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
+++ b/codebuild/py311/decrypt_dafny_esdk_vectors_keyrings.yml
@@ -20,6 +20,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/decrypt_golden_manifest_with_keyrings.yml b/codebuild/py311/decrypt_golden_manifest_with_keyrings.yml
index c65816d69..a26105627 100644
--- a/codebuild/py311/decrypt_golden_manifest_with_keyrings.yml
+++ b/codebuild/py311/decrypt_golden_manifest_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/decrypt_keyrings_with_keyrings.yml b/codebuild/py311/decrypt_keyrings_with_keyrings.yml
index f202c9c69..8e4e81972 100644
--- a/codebuild/py311/decrypt_keyrings_with_keyrings.yml
+++ b/codebuild/py311/decrypt_keyrings_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/decrypt_masterkey_with_keyrings.yml b/codebuild/py311/decrypt_masterkey_with_keyrings.yml
index 1542b1acb..ddb3ebc0a 100644
--- a/codebuild/py311/decrypt_masterkey_with_keyrings.yml
+++ b/codebuild/py311/decrypt_masterkey_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/decrypt_net_401_vectors_keyrings.yml b/codebuild/py311/decrypt_net_401_vectors_keyrings.yml
index 0cae98c4d..f9a0b7db6 100644
--- a/codebuild/py311/decrypt_net_401_vectors_keyrings.yml
+++ b/codebuild/py311/decrypt_net_401_vectors_keyrings.yml
@@ -17,6 +17,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/encrypt_keyrings.yml b/codebuild/py311/encrypt_keyrings.yml
index 8e315ca9f..ef2492086 100644
--- a/codebuild/py311/encrypt_keyrings.yml
+++ b/codebuild/py311/encrypt_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py311/generate_decrypt_vectors_keyrings.yml b/codebuild/py311/generate_decrypt_vectors_keyrings.yml
index 0c9fc8333..78b9658c9 100644
--- a/codebuild/py311/generate_decrypt_vectors_keyrings.yml
+++ b/codebuild/py311/generate_decrypt_vectors_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.11
+      dotnet: 6.0
   build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_dafny_esdk_vectors_keyrings.yml b/codebuild/py312/decrypt_dafny_esdk_vectors_keyrings.yml
index e20277d94..55f6661cc 100644
--- a/codebuild/py312/decrypt_dafny_esdk_vectors_keyrings.yml
+++ b/codebuild/py312/decrypt_dafny_esdk_vectors_keyrings.yml
@@ -20,6 +20,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_golden_manifest_with_keyrings.yml b/codebuild/py312/decrypt_golden_manifest_with_keyrings.yml
index c0442a10b..856810375 100644
--- a/codebuild/py312/decrypt_golden_manifest_with_keyrings.yml
+++ b/codebuild/py312/decrypt_golden_manifest_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_hkeyring_with_keyrings.yml b/codebuild/py312/decrypt_hkeyring_with_keyrings.yml
index 844f4c464..971859af7 100644
--- a/codebuild/py312/decrypt_hkeyring_with_keyrings.yml
+++ b/codebuild/py312/decrypt_hkeyring_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_keyrings_with_keyrings.yml b/codebuild/py312/decrypt_keyrings_with_keyrings.yml
index 27f9f1b5e..23c3310b5 100644
--- a/codebuild/py312/decrypt_keyrings_with_keyrings.yml
+++ b/codebuild/py312/decrypt_keyrings_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_masterkey_with_keyrings.yml b/codebuild/py312/decrypt_masterkey_with_keyrings.yml
index e22bd2ace..a006205c4 100644
--- a/codebuild/py312/decrypt_masterkey_with_keyrings.yml
+++ b/codebuild/py312/decrypt_masterkey_with_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/decrypt_net_401_vectors_keyrings.yml b/codebuild/py312/decrypt_net_401_vectors_keyrings.yml
index 281023f53..d89b93af1 100644
--- a/codebuild/py312/decrypt_net_401_vectors_keyrings.yml
+++ b/codebuild/py312/decrypt_net_401_vectors_keyrings.yml
@@ -17,6 +17,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   pre_build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/encrypt_keyrings.yml b/codebuild/py312/encrypt_keyrings.yml
index db12d6c9d..3c0f0e36e 100644
--- a/codebuild/py312/encrypt_keyrings.yml
+++ b/codebuild/py312/encrypt_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/codebuild/py312/generate_decrypt_vectors_keyrings.yml b/codebuild/py312/generate_decrypt_vectors_keyrings.yml
index 1760333f0..f995a82e6 100644
--- a/codebuild/py312/generate_decrypt_vectors_keyrings.yml
+++ b/codebuild/py312/generate_decrypt_vectors_keyrings.yml
@@ -16,6 +16,7 @@ phases:
   install:
     runtime-versions:
       python: 3.12
+      dotnet: 6.0
   build:
     commands:
       # Build Python MPL TestVector runner from source      
diff --git a/performance_tests/README.rst b/performance_tests/README.rst
index 1e23548dd..401a2faab 100644
--- a/performance_tests/README.rst
+++ b/performance_tests/README.rst
@@ -49,7 +49,7 @@ Required Prerequisites
 Recommended Prerequisites
 =========================
 
-* aws-cryptographic-material-providers: == 1.10.0
+* aws-cryptographic-material-providers: == 1.11.0
   * Requires Python 3.11+.
 
 *****
diff --git a/performance_tests/requirements_mpl.txt b/performance_tests/requirements_mpl.txt
index be77ea2da..5b7a4b0d6 100644
--- a/performance_tests/requirements_mpl.txt
+++ b/performance_tests/requirements_mpl.txt
@@ -1 +1 @@
-aws-cryptographic-material-providers>=1.7.4,<=1.10.0
\ No newline at end of file
+aws-cryptographic-material-providers>=1.7.4,<=1.11.0
\ No newline at end of file
diff --git a/requirements_mpl.txt b/requirements_mpl.txt
index 8912641d0..73bcc3450 100644
--- a/requirements_mpl.txt
+++ b/requirements_mpl.txt
@@ -1 +1 @@
-aws-cryptographic-material-providers>=1.7.4,<=1.10.0
+aws-cryptographic-material-providers>=1.7.4,<=1.11.0
diff --git a/setup.py b/setup.py
index 587495fd4..392b8ae65 100644
--- a/setup.py
+++ b/setup.py
@@ -40,7 +40,7 @@ def get_requirements():
     license="Apache License 2.0",
     install_requires=get_requirements(),
     extras_require={
-        "MPL": ["aws-cryptographic-material-providers>=1.7.4,<=1.10.0"],
+        "MPL": ["aws-cryptographic-material-providers>=1.7.4,<=1.11.0"],
     },
     classifiers=[
         "Development Status :: 5 - Production/Stable",
diff --git a/src/aws_encryption_sdk/identifiers.py b/src/aws_encryption_sdk/identifiers.py
index 8a5a2c8a1..049f2057e 100644
--- a/src/aws_encryption_sdk/identifiers.py
+++ b/src/aws_encryption_sdk/identifiers.py
@@ -17,7 +17,7 @@
     # We only actually need these imports when running the mypy checks
     pass
 
-__version__ = "4.0.1"
+__version__ = "4.0.2"
 USER_AGENT_SUFFIX = "AwsEncryptionSdkPython/{}".format(__version__)
 
 
diff --git a/test_vector_handlers/requirements_mpl.txt b/test_vector_handlers/requirements_mpl.txt
index 8912641d0..73bcc3450 100644
--- a/test_vector_handlers/requirements_mpl.txt
+++ b/test_vector_handlers/requirements_mpl.txt
@@ -1 +1 @@
-aws-cryptographic-material-providers>=1.7.4,<=1.10.0
+aws-cryptographic-material-providers>=1.7.4,<=1.11.0
diff --git a/test_vector_handlers/scripts/install_mpl_test_vector_runner.sh b/test_vector_handlers/scripts/install_mpl_test_vector_runner.sh
index aecff1a26..db373d61a 100644
--- a/test_vector_handlers/scripts/install_mpl_test_vector_runner.sh
+++ b/test_vector_handlers/scripts/install_mpl_test_vector_runner.sh
@@ -20,5 +20,7 @@ unzip -qq dafny.zip && rm dafny.zip
 export PATH="$PWD/dafny:$PATH"
 
 # Build MPL test vector runner from source
-cd aws-cryptographic-material-providers-library/TestVectorsAwsCryptographicMaterialProviders/
+cd aws-cryptographic-material-providers-library/
+make -C StandardLibrary setup_net # Without this the if-dafny-at-least command includes "Downloading ..." output
+cd TestVectorsAwsCryptographicMaterialProviders/
 make transpile_python