diff --git a/security/py-pycryptodome/Makefile b/security/py-pycryptodome/Makefile
index 8dce5f756172..e61270276eeb 100644
--- a/security/py-pycryptodome/Makefile
+++ b/security/py-pycryptodome/Makefile
@@ -1,40 +1,40 @@
 PORTNAME?=	pycryptodome
-DISTVERSION=	3.20.0
+DISTVERSION=	3.21.0
 CATEGORIES=	security python
 MASTER_SITES=	PYPI
 PKGNAMEPREFIX=	${PYTHON_PKGNAMEPREFIX}
 
 MAINTAINER=	john@saltant.com
 COMMENT=	Cryptographic library for Python
 WWW=		https://www.pycryptodome.org/
 
-LICENSE=	APACHE20 BSD2CLAUSE PD
+LICENSE=	BSD2CLAUSE PD
 LICENSE_COMB=	multi
 LICENSE_FILE=	${WRKSRC}/LICENSE.rst
 
 BUILD_DEPENDS=	${PY_SETUPTOOLS} \
 		${PYTHON_PKGNAMEPREFIX}wheel>=0:devel/py-wheel@${PY_FLAVOR}
 TEST_DEPENDS=	${PYTHON_PKGNAMEPREFIX}pycryptodome-test-vectors>=0:security/py-pycryptodome-test-vectors@${PY_FLAVOR} \
 		gmp>=0:math/gmp
 
-# Officially: 2.7, 3.5-3.12
+# Officially: 2.7, 3.6-3.13
 USES=		cpe python
 CPE_VENDOR=	python
 USE_PYTHON=	autoplist pep517
 
 CONFLICTS_INSTALL?=	${PYTHON_PKGNAMEPREFIX}pycrypto
 
 NAMESPACE?=	Crypto
 
 post-install:
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/Cipher/*.so
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/Hash/*.so
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/Math/*.so
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/Protocol/*.so
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/PublicKey/*.so
 	@${STRIP_CMD} ${STAGEDIR}${PYTHONPREFIX_SITELIBDIR}/${NAMESPACE}/Util/*.so
 
 do-test:
 	@cd ${WRKSRC} && ${PYTHON_CMD} -m ${NAMESPACE}.SelfTest
 
 .include <bsd.port.mk>
diff --git a/security/py-pycryptodome/distinfo b/security/py-pycryptodome/distinfo
index 70cbdbf51cc6..b1385af4f4d4 100644
--- a/security/py-pycryptodome/distinfo
+++ b/security/py-pycryptodome/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1706557466
-SHA256 (pycryptodome-3.20.0.tar.gz) = 09609209ed7de61c2b560cc5c8c4fbf892f8b15b1faf7e4cbffac97db1fffda7
-SIZE (pycryptodome-3.20.0.tar.gz) = 4794232
+TIMESTAMP = 1728944664
+SHA256 (pycryptodome-3.21.0.tar.gz) = f7787e0d469bdae763b876174cf2e6c0f7be79808af26b1da96f1a64bcf47297
+SIZE (pycryptodome-3.21.0.tar.gz) = 4818071
diff --git a/security/py-pycryptodome/pkg-descr b/security/py-pycryptodome/pkg-descr
index 9f0f9f2a180a..c725c82ca2f3 100644
--- a/security/py-pycryptodome/pkg-descr
+++ b/security/py-pycryptodome/pkg-descr
@@ -1,20 +1,20 @@
 PyCryptodome is a fork of PyCrypto. It brings the following
 enhancements with respect to the last official version of
 PyCrypto (2.6.1):
 
 * Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
 * Accelerated AES on Intel platforms via AES-NI
 * First class support for PyPy
-* Elliptic curves cryptography (NIST P-curves; Ed25519, Ed448)
+* Elliptic curves cryptography (NIST P-curves; Ed25519, Ed448, Curve25519)
 * Better and more compact API
 * SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
 * Salsa20 and ChaCha20 stream ciphers
 * scrypt and HKDF
 * Deterministic (EC)DSA and EdDSA
 * Password-protected PKCS#8 key containers
 * Shamir's Secret Sharing scheme
 * Random numbers get sourced directly from the OS (and not from
   a CSPRNG in userspace)
 * Simplified install process, including better support for Windows
 * Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
 * Major clean ups and simplification of the code base
diff --git a/security/py-pycryptodomex/distinfo b/security/py-pycryptodomex/distinfo
index 60be8a89acff..39e5650c988a 100644
--- a/security/py-pycryptodomex/distinfo
+++ b/security/py-pycryptodomex/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1706557470
-SHA256 (pycryptodomex-3.20.0.tar.gz) = 7a710b79baddd65b806402e14766c721aee8fb83381769c27920f26476276c1e
-SIZE (pycryptodomex-3.20.0.tar.gz) = 4794613
+TIMESTAMP = 1730098751
+SHA256 (pycryptodomex-3.21.0.tar.gz) = 222d0bd05381dd25c32dd6065c071ebf084212ab79bab4599ba9e6a3e0009e6c
+SIZE (pycryptodomex-3.21.0.tar.gz) = 4818543