diff --git a/changelogs/fragments/652-remove-pycrypto.yml b/changelogs/fragments/652-remove-pycrypto.yml
new file mode 100644
index 0000000..cb6d3cb
--- /dev/null
+++ b/changelogs/fragments/652-remove-pycrypto.yml
@@ -0,0 +1,2 @@
+bugfixes:
+  - Remove unmaintained and vulnerable ``pycrypto`` dependency from unit test requirements.
diff --git a/tests/unit/requirements.txt b/tests/unit/requirements.txt
index a9772be..ec26ed5 100644
--- a/tests/unit/requirements.txt
+++ b/tests/unit/requirements.txt
@@ -1,6 +1,5 @@
 boto3
 placebo
-pycrypto
 passlib
 pypsrp
 python-memcached