you don't let friends use pycrypto

Unmaintained package with CVE might not be a good help
https://www.cvedetails.com/product/22441/Dlitz-Pycrypto.html?vendor_id=11993

I also share the opinion of the author that pycrypto and its fork may promote insecure usage (like AES::ECB)
https://theartofmachinery.com/2017/02/02/dont_use_pycrypto.html