diff --git a/CHANGELOG.md b/CHANGELOG.md
index 567cbf5d..2d568371 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 ## [Unreleased]
 
 
+<a name="1.6.4"></a>
+## [1.6.4] - 2025-09-08
+### bug fixes
+- **jwk:** fix EC key x and y padding [42cac34](https://github.com/fffonion/lua-resty-openssl/commit/42cac34d5749c8b629002f66e8bbc8ce7ff54303)
+
+
 <a name="1.6.3"></a>
 ## [1.6.3] - 2025-09-04
 ### bug fixes
@@ -658,7 +664,8 @@
 - **x509:** export pubkey [ede4f81](https://github.com/fffonion/lua-resty-openssl/commit/ede4f817cb0fe092ad6f9ab5d6ecdcde864a9fd8)
 
 
-[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.3...HEAD
+[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.4...HEAD
+[1.6.4]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.3...1.6.4
 [1.6.3]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.2...1.6.3
 [1.6.2]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.1...1.6.2
 [1.6.1]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.0...1.6.1
diff --git a/lib/resty/openssl.lua b/lib/resty/openssl.lua
index dc13a267..c1856967 100644
--- a/lib/resty/openssl.lua
+++ b/lib/resty/openssl.lua
@@ -24,7 +24,7 @@ try_require_modules()
 
 
 local _M = {
-  _VERSION = '1.6.3',
+  _VERSION = '1.6.4',
 }
 
 function _M.load_modules()
diff --git a/lua-resty-openssl-1.6.3-1.rockspec b/lua-resty-openssl-1.6.4-1.rockspec
similarity index 99%
rename from lua-resty-openssl-1.6.3-1.rockspec
rename to lua-resty-openssl-1.6.4-1.rockspec
index 68d58fbd..e970525e 100644
--- a/lua-resty-openssl-1.6.3-1.rockspec
+++ b/lua-resty-openssl-1.6.4-1.rockspec
@@ -1,8 +1,8 @@
 package = "lua-resty-openssl"
-version = "1.6.3-1"
+version = "1.6.4-1"
 source = {
    url = "git+https://github.com/fffonion/lua-resty-openssl.git",
-   tag = "1.6.3"
+   tag = "1.6.4"
 }
 description = {
    detailed = "FFI-based OpenSSL binding for LuaJIT.",