Is cryptography (PyPI) safe to install?

Is cryptography safe? PyPI package security — ShadowCanopy

Safe to use

Deep-scanned by ShadowCanopy — no threats found in its code, dependencies, or network behavior.

Scanned 8/29/2026

Approvedcryptography@50.0.1View on registry ↗latest: 50.0.1

Legitimate cryptography package. All flagged patterns are test vectors, hex/byte literals for crypto algorithms, ASN.1 constants, and OIDs — standard in this library. No malicious behavior present.

Protect your projects free

AI breakdown

Plain-English summary of what this package does and how it behaves.

cryptography is a package which provides cryptographic recipes and primitives to Python developers. It includes Rust components (Cargo.toml) and extensive documentation.

Capabilities

Provides cryptographic primitives
Includes Rust native extensions

Data access

None observed

Network

Hardcoded public IP in network code (static findings)

Static analysis flagged multiple obfuscated source files and hardcoded public IPs; however the manifest describes a standard cryptography library with no scripts or dependencies.

Dependency & execution chain

Every package this one pulls in, colored by verdict. Expand to walk the tree.

4 packages3 direct

cryptography@50.0.158 findings

cffi@2.1.130 findings

typing-extensions@4.16.04 findings

Obfuscated / hidden code

Encoded payloads decoded statically (without executing them) so you can see what they resolve to.

Obfuscated source filesrc/rust/cryptography-crypto/src/pkcs12.rs

Multiple obfuscation patterns in src/rust/cryptography-crypto/src/pkcs12.rs

Obfuscated source filecryptography-50.0.1/src/rust/cryptography-crypto/src/pkcs12.rs

Multiple obfuscation patterns in cryptography-50.0.1/src/rust/cryptography-crypto/src/pkcs12.rs

Obfuscated source filetests/hazmat/primitives/test_asym_utils.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_asym_utils.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_asym_utils.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_asym_utils.py

Obfuscated source filetests/hazmat/primitives/test_hashes.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_hashes.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_hashes.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_hashes.py

Obfuscated source filetests/hazmat/primitives/test_poly1305.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_poly1305.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_poly1305.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_poly1305.py

Obfuscated source filetests/hazmat/primitives/test_rsa.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_rsa.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_rsa.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_rsa.py

Obfuscated source filetests/hazmat/primitives/test_scrypt.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_scrypt.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_scrypt.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_scrypt.py

Obfuscated source filetests/hazmat/primitives/test_ssh.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_ssh.py

Obfuscated source filecryptography-50.0.1/tests/hazmat/primitives/test_ssh.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_ssh.py

Obfuscated source filetests/test_utils.py

Multiple obfuscation patterns in tests/test_utils.py

Obfuscated source filecryptography-50.0.1/tests/test_utils.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/test_utils.py

Obfuscated source filetests/x509/test_x509.py

Multiple obfuscation patterns in tests/x509/test_x509.py

Obfuscated source filecryptography-50.0.1/tests/x509/test_x509.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/x509/test_x509.py

Obfuscated source filetests/x509/test_x509_ext.py

Multiple obfuscation patterns in tests/x509/test_x509_ext.py

Obfuscated source filecryptography-50.0.1/tests/x509/test_x509_ext.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/x509/test_x509_ext.py

Security findings (58)

Static analysis rule matches, with the exact code that triggered them.

mediumObfuscated source fileATK-023src/rust/cryptography-crypto/src/pkcs12.rs

Multiple obfuscation patterns in src/rust/cryptography-crypto/src/pkcs12.rs

mediumObfuscated source fileATK-023cryptography-50.0.1/src/rust/cryptography-crypto/src/pkcs12.rs

Multiple obfuscation patterns in cryptography-50.0.1/src/rust/cryptography-crypto/src/pkcs12.rs

mediumObfuscated source fileATK-023src/rust/cryptography-x509-verification/src/lib.rs

Multiple obfuscation patterns in src/rust/cryptography-x509-verification/src/lib.rs

mediumObfuscated source fileATK-023cryptography-50.0.1/src/rust/cryptography-x509-verification/src/lib.rs

Multiple obfuscation patterns in cryptography-50.0.1/src/rust/cryptography-x509-verification/src/lib.rs

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_aes_gcm.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_aes_gcm.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_aes_gcm.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_aes_gcm.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_asym_utils.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_asym_utils.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_asym_utils.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_asym_utils.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_concatkdf.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_concatkdf.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_concatkdf.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_concatkdf.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_dh.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_dh.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_dh.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_dh.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_dsa.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_dsa.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_dsa.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_dsa.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_ec.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_ec.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_ec.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_ec.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_ed25519.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_ed25519.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_ed25519.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_ed25519.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_hashes.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_hashes.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_hashes.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_hashes.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_hkdf.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_hkdf.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_hkdf.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_hkdf.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_hmac.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_hmac.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_hmac.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_hmac.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_hpke.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_hpke.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_hpke.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_hpke.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_poly1305.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_poly1305.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_poly1305.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_poly1305.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_rsa.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_rsa.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_rsa.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_rsa.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_scrypt.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_scrypt.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_scrypt.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_scrypt.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_serialization.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_serialization.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_serialization.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_serialization.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_ssh.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_ssh.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_ssh.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_ssh.py

mediumObfuscated source fileATK-023tests/hazmat/primitives/test_x963kdf.py

Multiple obfuscation patterns in tests/hazmat/primitives/test_x963kdf.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/hazmat/primitives/test_x963kdf.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/hazmat/primitives/test_x963kdf.py

mediumObfuscated source fileATK-023tests/test_utils.py

Multiple obfuscation patterns in tests/test_utils.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/test_utils.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/test_utils.py

mediumObfuscated source fileATK-023tests/x509/test_ocsp.py

Multiple obfuscation patterns in tests/x509/test_ocsp.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/x509/test_ocsp.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/x509/test_ocsp.py

mediumObfuscated source fileATK-023tests/x509/test_x509.py

Multiple obfuscation patterns in tests/x509/test_x509.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/x509/test_x509.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/x509/test_x509.py

mediumObfuscated source fileATK-023tests/x509/test_x509_ext.py

Multiple obfuscation patterns in tests/x509/test_x509_ext.py

mediumObfuscated source fileATK-023cryptography-50.0.1/tests/x509/test_x509_ext.py

Multiple obfuscation patterns in cryptography-50.0.1/tests/x509/test_x509_ext.py

highHardcoded public IP in network codeATK-028docs/conf.py

File docs/conf.py contains a hardcoded public IP (19:19:14) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/docs/conf.py

File cryptography-50.0.1/docs/conf.py contains a hardcoded public IP (19:19:14) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028src/rust/src/backend/aead.rs

File src/rust/src/backend/aead.rs contains a hardcoded public IP (Aad::) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/src/rust/src/backend/aead.rs

File cryptography-50.0.1/src/rust/src/backend/aead.rs contains a hardcoded public IP (Aad::) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/test_utils.py

File tests/test_utils.py contains a hardcoded public IP (5.6.2.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/tests/test_utils.py

File cryptography-50.0.1/tests/test_utils.py contains a hardcoded public IP (5.6.2.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/x509/test_x509.py

File tests/x509/test_x509.py contains a hardcoded public IP (1.2.3.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/tests/x509/test_x509.py

File cryptography-50.0.1/tests/x509/test_x509.py contains a hardcoded public IP (1.2.3.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/x509/test_x509_ext.py

File tests/x509/test_x509_ext.py contains a hardcoded public IP (2.5.29.19) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/tests/x509/test_x509_ext.py

File cryptography-50.0.1/tests/x509/test_x509_ext.py contains a hardcoded public IP (2.5.29.19) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028tests/x509/verification/test_verification.py

File tests/x509/verification/test_verification.py contains a hardcoded public IP (1.2.3.4) used in network code — review for hidden exfiltration or C2 endpoints.

highHardcoded public IP in network codeATK-028cryptography-50.0.1/tests/x509/verification/test_verification.py

File cryptography-50.0.1/tests/x509/verification/test_verification.py contains a hardcoded public IP (1.2.3.4) used in network code — review for hidden exfiltration or C2 endpoints.

Package metadata

LicenseUnknown

cryptography is a package which provides cryptographic recipes and primitives to Python developers.

Files in package (500)

PKG-INFOcryptography-50.0.1/PKG-INFO.gitattributescryptography-50.0.1/.gitattributes.gitignorecryptography-50.0.1/.gitignoreAGENTS.mdcryptography-50.0.1/AGENTS.mdCHANGELOG.rstcryptography-50.0.1/CHANGELOG.rstCLAUDE.mdcryptography-50.0.1/CLAUDE.mdCONTRIBUTING.rstcryptography-50.0.1/CONTRIBUTING.rstCargo.lockcryptography-50.0.1/Cargo.lockCargo.tomlcryptography-50.0.1/Cargo.tomlLICENSEcryptography-50.0.1/LICENSELICENSE.APACHEcryptography-50.0.1/LICENSE.APACHELICENSE.BSDcryptography-50.0.1/LICENSE.BSDREADME.rstcryptography-50.0.1/README.rstdocs/Makefilecryptography-50.0.1/docs/Makefiledocs/_ext/cryptography-docs.pycryptography-50.0.1/docs/_ext/cryptography-docs.pydocs/_ext/linkcode_res.pycryptography-50.0.1/docs/_ext/linkcode_res.pydocs/_templates/layout.htmlcryptography-50.0.1/docs/_templates/layout.htmldocs/api-stability.rstcryptography-50.0.1/docs/api-stability.rstdocs/changelog.rstcryptography-50.0.1/docs/changelog.rstdocs/cobblestone.rstcryptography-50.0.1/docs/cobblestone.rst

How ShadowCanopy checks PyPI packages

ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.

Protect your projects free See what's being blocked

Other PyPI packages

requests urllib3 flask django numpy pandas boto3 pytest pip setuptools python-dateutil pyyaml

This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/pypi/cryptography

cryptography — deep security report