diff --git a/scripts/ci.requirements.txt b/scripts/ci.requirements.txt
index fc10c63..123b543 100644
--- a/scripts/ci.requirements.txt
+++ b/scripts/ci.requirements.txt
@@ -16,12 +16,8 @@
 mypy == 0.942
 
 # At the time of writing, only needed for tests/scripts/audit-validity-dates.py.
-# It needs >=35.0.0 for correct operation, and that requires Python >=3.6,
-# but our CI has Python 3.5. So let pip install the newest version that's
-# compatible with the running Python: this way we get something good enough
-# for mypy and pylint under Python 3.5, and we also get something good enough
-# to run audit-validity-dates.py on Python >=3.6.
-cryptography # >= 35.0.0
+# It needs >=35.0.0 for correct operation, and that requires Python >=3.6.
+cryptography >= 35.0.0
 
 # For building `framework/data_files/server9-bad-saltlen.crt` and check python
 # files.