diff --git a/acme/setup.py b/acme/setup.py
index 6856dff98..904ab162f 100644
--- a/acme/setup.py
+++ b/acme/setup.py
@@ -6,7 +6,7 @@ from setuptools import setup
 version = '2.6.0.dev0'
 
 install_requires = [
-    'cryptography>=2.5.0',
+    'cryptography>=3.2.1',
     'josepy>=1.13.0',
     # pyOpenSSL 23.1.0 is a bad release: https://github.com/pyca/pyopenssl/issues/1199
     'PyOpenSSL>=17.5.0,!=23.1.0',
diff --git a/certbot/setup.py b/certbot/setup.py
index fddc7c026..0ab157d94 100644
--- a/certbot/setup.py
+++ b/certbot/setup.py
@@ -50,7 +50,7 @@ install_requires = [
     # in which we added 2.6 support (see #2243), so we relax the requirement.
     'ConfigArgParse>=0.9.3',
     'configobj>=5.0.6',
-    'cryptography>=2.5.0',
+    'cryptography>=3.2.1',
     'distro>=1.0.1',
     'josepy>=1.13.0',
     'parsedatetime>=2.4',