diff --git a/invenio_theme_tugraz/crypto.py b/invenio_theme_tugraz/crypto.py
deleted file mode 100644
index c778326..0000000
--- a/invenio_theme_tugraz/crypto.py
+++ /dev/null
@@ -1,88 +0,0 @@
-#!/usr/bin/env python
-
-"""crypto helper module. see https://gist.github.com/marcoslin/8026990."""
-
-import binascii
-
-from Crypto import Random
-from Crypto.Cipher import AES
-
-
-# ------------------------------
-# DEFINE Encryption Class
-class Cryptor(object):
-    """Crypto class implementation.
-
-    Provide encryption and decryption function that works with crypto-js.
-    https://code.google.com/p/crypto-js/
-
-    Padding implemented as per RFC 2315: PKCS#7 page 21
-    http://www.ietf.org/rfc/rfc2315.txt
-
-    The key to make pycrypto work with crypto-js are:
-    1. Use MODE_CFB.  For some reason, crypto-js decrypted result from MODE_CBC
-       gets truncated
-    2. Use Pkcs7 padding as per RFC 2315, the default padding used by CryptoJS
-    3. On the JS side, make sure to wrap ciphertext with CryptoJS.lib.CipherParams.create()
-    """
-
-    # AES-256 key (32 bytes)
-    KEY = "01ab38d5e05c92aa098921d9d4626107133c7e2ab0e4849558921ebcc242bcb0"
-    BLOCK_SIZE = 16
-
-    @classmethod
-    def _pad_string(cls, in_string):
-        """Pad an input string according to PKCS#7."""
-        in_len = len(in_string)
-        pad_size = cls.BLOCK_SIZE - (in_len % cls.BLOCK_SIZE)
-        return in_string.ljust(in_len + pad_size, chr(pad_size))
-
-    @classmethod
-    def _unpad_string(cls, in_string):
-        """Remove the PKCS#7 padding from a text string."""
-        in_len = len(in_string)
-        pad_size = ord(in_string[-1])
-        if pad_size > cls.BLOCK_SIZE:
-            raise ValueError("Input is not padded or padding is corrupt")
-        return in_string[: in_len - pad_size]
-
-    @classmethod
-    def generate_iv(cls, size=16):
-        """Generate initialization vector."""
-        return Random.get_random_bytes(size)
-
-    @classmethod
-    def encrypt(cls, in_string, in_key, in_iv=None):
-        """Return encrypted string.
-
-        @in_string: Simple str to be encrypted
-        @key: hexified key
-        @iv: hexified iv
-        """
-        key = binascii.a2b_hex(in_key)
-
-        if in_iv is None:
-            iv = cls.generate_iv()
-            in_iv = binascii.b2a_hex(iv)
-        else:
-            iv = binascii.a2b_hex(in_iv)
-
-        aes = AES.new(key, AES.MODE_CFB, iv, segment_size=128)
-        padded = cls._pad_string(in_string).encode("utf-8")
-        encrypted = aes.encrypt(padded)
-        return in_iv, encrypted
-
-    @classmethod
-    def decrypt(cls, in_encrypted, in_key, in_iv):
-        """Return encrypted string.
-
-        @in_encrypted: Base64 encoded
-        @key: hexified key
-        @iv: hexified iv
-        """
-        key = binascii.a2b_hex(in_key)
-        iv = binascii.a2b_hex(in_iv)
-        aes = AES.new(key, AES.MODE_CFB, iv, segment_size=128)
-
-        decrypted = aes.decrypt(binascii.a2b_base64(in_encrypted).rstrip())
-        return cls._unpad_string(decrypted)
diff --git a/invenio_theme_tugraz/views.py b/invenio_theme_tugraz/views.py
index 76173bc..1a617cc 100644
--- a/invenio_theme_tugraz/views.py
+++ b/invenio_theme_tugraz/views.py
@@ -33,7 +33,6 @@ from invenio_rdm_records.resources.config import RDMDraftFilesResourceConfig
 from invenio_rdm_records.resources.serializers import UIJSONSerializer
 from invenio_rdm_records.services import RDMDraftFilesService
 
-from .crypto import Cryptor
 from .search import FrontpageRecordsSearch
 
 
diff --git a/setup.py b/setup.py
index 08c5f35..e0d1a89 100644
--- a/setup.py
+++ b/setup.py
@@ -60,8 +60,6 @@ install_requires = [
     "invenio_search>=1.4.0,<2.0.0",
     # keep this package updated.
     "invenio_app_rdm<=1.0.0",
-    # needed for DOI credential encryption
-    "pycryptodome==3.10.1",
 ]
 
 packages = find_packages()