we use `pycrypto` for aes encryption, but we should use `cryptography` instead for following reasons: - `pycrypto` is dead project with last commit in 2014 - multiple outstanding exploits (CVE-2013-7459)[https://www.cvedetails.com/cve/CVE-2013-7459/],(CVE-2018-6594)[https://www.cvedetails.com/cve/CVE-2018-6594/)