I think that main issue in this is the pyca/cryptography library itself and its unfortunate name. It bundles three only marginally related things (high-level sy

I think that main issue in this is the pyca/cryptography library itself and its unfortunate name. It bundles three only marginally related things (high-level symmetric encryption API, X.509 handling and bunch of cryptographic primitives) things into one library that is first result on google for "python cryptography". The end result of this is that another libraries which need only some small part (which is probably better provided by some other python crypto package) depend on the whole library.