Document that this software is unmaintained upstream

README.md

@@ -0,0 +1,21 @@
+## PyCrypto - The Python Cryptography Toolkit
+
+**This software is no longer maintained**
+
+See upstream notice at https://www.pycrypto.org/
+
+PyCrypto 2.x is unmaintained and obsolete. Known security vulnerabilities
+have been patched downstream by backporting code from PyCryptodome (see below).
+
+Please choose one of the following alternatives:
+
+[Cryptography](https://src.fedoraproject.org/rpms/python-cryptography)
+
+ * Recommended for new applications
+ * Newer API with fewer gotchas
+
+[PyCryptodome](https://src.fedoraproject.org/rpms/python-pycryptodomex)
+
+ * Recommended for existing software that depends on PyCrypto
+ * Fork of PyCrypto - most applications should run unmodified
+

python-crypto.spec

@@ -37,6 +37,9 @@ BuildRequires:	python%{python3_pkgversion}-setuptools
 PyCrypto is a collection of both secure hash functions (such as MD5 and
 SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).
 
+This software is no longer maintained upstream. Please use the Cryptography
+or PyCryptodome software instead.
+
 %package -n python%{python3_pkgversion}-crypto
 Summary:	Cryptography library for Python 3
 %{?python_provide:%python_provide python%{python3_pkgversion}-crypto}
@@ -47,6 +50,9 @@ SHA), and various encryption algorithms (AES, DES, RSA, ElGamal, etc.).
 
 This is the Python 3 build of the package.
 
+This software is no longer maintained upstream. Please use the Cryptography
+or PyCryptodome software instead.
+
 %prep
 %setup -n pycrypto-%{version} -q