diff --git a/security/py-pycryptodome/Makefile b/security/py-pycryptodome/Makefile
index 8dce5f75617..e61270276ee 100644
--- a/security/py-pycryptodome/Makefile
+++ b/security/py-pycryptodome/Makefile
@@ -1,5 +1,5 @@
 PORTNAME?=	pycryptodome
-DISTVERSION=	3.20.0
+DISTVERSION=	3.21.0
 CATEGORIES=	security python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
@@ -8,7 +8,7 @@ MAINTAINER=	john@saltant.com
 COMMENT=	Cryptographic library for Python
 WWW=		https://www.pycryptodome.org/
 
-LICENSE=	APACHE20 BSD2CLAUSE PD
+LICENSE=	BSD2CLAUSE PD
 LICENSE_COMB=	multi
 LICENSE_FILE=	${WRKSRC}/LICENSE.rst
 
@@ -17,7 +17,7 @@ BUILD_DEPENDS=	${PY_SETUPTOOLS} \
 TEST_DEPENDS=	${PYTHON_PKGNAMEPREFIX}pycryptodome-test-vectors>=0:security/py-pycryptodome-test-vectors@${PY_FLAVOR} \
 		gmp>=0:math/gmp
 
-# Officially: 2.7, 3.5-3.12
+# Officially: 2.7, 3.6-3.13
 USES=		cpe python
 CPE_VENDOR=	python
 USE_PYTHON=	autoplist pep517
diff --git a/security/py-pycryptodome/distinfo b/security/py-pycryptodome/distinfo
index 70cbdbf51cc..b1385af4f4d 100644
--- a/security/py-pycryptodome/distinfo
+++ b/security/py-pycryptodome/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1706557466
-SHA256 (pycryptodome-3.20.0.tar.gz) = 09609209ed7de61c2b560cc5c8c4fbf892f8b15b1faf7e4cbffac97db1fffda7
-SIZE (pycryptodome-3.20.0.tar.gz) = 4794232
+TIMESTAMP = 1728944664
+SHA256 (pycryptodome-3.21.0.tar.gz) = f7787e0d469bdae763b876174cf2e6c0f7be79808af26b1da96f1a64bcf47297
+SIZE (pycryptodome-3.21.0.tar.gz) = 4818071
diff --git a/security/py-pycryptodome/pkg-descr b/security/py-pycryptodome/pkg-descr
index 9f0f9f2a180..c725c82ca2f 100644
--- a/security/py-pycryptodome/pkg-descr
+++ b/security/py-pycryptodome/pkg-descr
@@ -5,7 +5,7 @@ PyCrypto (2.6.1):
 * Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
 * Accelerated AES on Intel platforms via AES-NI
 * First class support for PyPy
-* Elliptic curves cryptography (NIST P-curves; Ed25519, Ed448)
+* Elliptic curves cryptography (NIST P-curves; Ed25519, Ed448, Curve25519)
 * Better and more compact API
 * SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
 * Salsa20 and ChaCha20 stream ciphers