Closed
Description
The cryptography
library is currently pinned at version 3.2.1, because 3.3 dropped Python 3.5 support, which is the version of Python included with Ubuntu 16.04.
After the full removal of Xenial support (#5725), we should be in a good position to update the cryptography
library as part of the SecureDrop 2.0.0 release. We can consider:
- version 3.3.2, which as of this writing is the last release with security fixes, and which was released prior to the inclusion of Rust code
- the latest stable version at the time of release, which will introduce the Rust build requirement.