diff --git a/requirements.txt b/requirements.txt
index cec0286..78a41f0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -44,3 +44,8 @@ paramiko
 sphinx
 sphinxcontrib-asyncio
 git+https://github.com/openstack-charmers/zaza#egg=zaza
+
+# Newer versions require a Rust compiler to build, see
+# * https://github.com/openstack-charmers/zaza/issues/421
+# * https://mail.python.org/pipermail/cryptography-dev/2021-January/001003.html
+cryptography<3.4
diff --git a/setup.py b/setup.py
index b18cd9a..fb4377d 100644
--- a/setup.py
+++ b/setup.py
@@ -28,7 +28,12 @@ install_require = [
     'futurist<2.0.0',
     'async_generator',
     'boto3',
-    'cryptography',
+
+    # Newer versions require a Rust compiler to build, see
+    # * https://github.com/openstack-charmers/zaza/issues/421
+    # * https://mail.python.org/pipermail/cryptography-dev/2021-January/001003.html
+    'cryptography<3.4',
+
     'dnspython',
     'hvac<0.7.0',
     'jinja2',