Based on what's in Debian testing.
Cryptography now requires Rust. Use the newer pip to install the pre-built wheel.