diff --git a/diff/walking/differ.go b/diff/walking/differ.go
index ee9277881..462d70856 100644
--- a/diff/walking/differ.go
+++ b/diff/walking/differ.go
@@ -18,10 +18,10 @@ package walking
 
 import (
 	"context"
-	"crypto/rand"
 	"encoding/base64"
 	"fmt"
 	"io"
+	"math/rand"
 	"time"
 
 	"github.com/containerd/containerd/archive"
diff --git a/rootfs/apply.go b/rootfs/apply.go
index a1a2db938..3ea830f6b 100644
--- a/rootfs/apply.go
+++ b/rootfs/apply.go
@@ -18,9 +18,9 @@ package rootfs
 
 import (
 	"context"
-	"crypto/rand"
 	"encoding/base64"
 	"fmt"
+	"math/rand"
 	"time"
 
 	"github.com/containerd/containerd/diff"
diff --git a/services/leases/local.go b/services/leases/local.go
index 1b3a62112..d2b4ab859 100644
--- a/services/leases/local.go
+++ b/services/leases/local.go
@@ -18,9 +18,9 @@ package leases
 
 import (
 	"context"
-	"crypto/rand"
 	"encoding/base64"
 	"fmt"
+	"math/rand"
 	"time"
 
 	"google.golang.org/grpc"