diff --git a/src/pretix/base/secrets.py b/src/pretix/base/secrets.py
index e318c226a7..22f13148b9 100644
--- a/src/pretix/base/secrets.py
+++ b/src/pretix/base/secrets.py
@@ -4,7 +4,7 @@ import struct
 
 from cryptography.hazmat.backends.openssl.backend import Backend
 from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
-from cryptography.hazmat.primitives.serialization.base import (
+from cryptography.hazmat.primitives.serialization import (
     Encoding, NoEncryption, PrivateFormat, PublicFormat, load_pem_private_key,
     load_pem_public_key,
 )
diff --git a/src/requirements/production.txt b/src/requirements/production.txt
index d55d8e6924..18f912fe37 100644
--- a/src/requirements/production.txt
+++ b/src/requirements/production.txt
@@ -69,5 +69,5 @@ packaging
 tlds>=2020041600
 text-unidecode==1.*
 protobuf==3.13.*
-cryptography
+cryptography>=3.4.2
 sepaxml==2.4.*,>=2.4.1
diff --git a/src/setup.py b/src/setup.py
index ef3670b81d..db3cea586a 100644
--- a/src/setup.py
+++ b/src/setup.py
@@ -155,7 +155,7 @@ setup(
         'tlds>=2020041600',
         'text-unidecode==1.*',
         'protobuf==3.13.*',
-        'cryptography',
+        'cryptography>=3.4.2',
         'sepaxml==2.4.*,>=2.4.1',
     ],
     extras_require={