diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3d711f009..008486846 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,7 @@ at anytime.
   * `startup_status` field in the response to `status` to be a dict of component names to status booleans
   * moved wallet, upnp and dht startup code from `Session` to `Components`
   * attempt blob downloads from http mirror sources (by default) concurrently to p2p sources
+  * update `cryptography` requirement to 2.3
 
 ### Added
   * `skipped_components` list to the response from `status`
diff --git a/requirements.txt b/requirements.txt
index 12667dc62..42c78bb0b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,6 +1,6 @@
 certifi==2018.4.16
 Twisted==16.6.0
-cryptography==2.2.2
+cryptography==2.3
 appdirs==1.4.3
 argparse==1.2.1
 docopt==0.6.2