diff --git a/ansible.spec b/ansible.spec
index 3cbdfe3..0f36176 100644
--- a/ansible.spec
+++ b/ansible.spec
@@ -20,7 +20,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-buildroot
 Name: ansible
 Summary: SSH-based configuration management, deployment, and task execution system
 Version: 2.2.2.0
-Release: 0.3.rc1%{?dist}
+Release: 0.4.rc1%{?dist}
 
 Group: Development/Libraries
 License: GPLv3+
@@ -69,6 +69,7 @@ BuildRequires: python-setuptools
 # We don't run tests on epel6, so don't bother pulling these in there.
 %if (0%{?fedora} ||  0%{?rhel} > 6)
 BuildRequires: PyYAML
+BuildRequires: python-crypto
 BuildRequires: python-paramiko
 BuildRequires: python-keyczar
 BuildRequires: python-six
@@ -95,6 +96,7 @@ BuildRequires: python-jinja2
 %endif
 
 Requires: PyYAML
+Requires: python-crypto
 Requires: python-paramiko
 Requires: python-keyczar
 Requires: python-httplib2
@@ -152,6 +154,7 @@ BuildRequires: python3-setuptools
 # For tests
 BuildRequires: python3-PyYAML
 BuildRequires: python3-paramiko
+BuildRequires: python3-crypto
 # accelerate is the only thing that makes keyczar mandatory.  Since accelerate
 # is deprecated, just ignore it
 #BuildRequires: python-keyczar
@@ -167,6 +170,7 @@ BuildRequires: python3-jinja2
 
 Requires: python3-PyYAML
 Requires: python3-paramiko
+Requires: python3-crypto
 # accelerate is the only thing that makes keyczar mandatory.  Since accelerate
 # is deprecated, just ignore it
 #Requires: python3-keyczar
@@ -282,6 +286,9 @@ rm -rf $RPM_BUILD_ROOT
 %doc %{_mandir}/man1/ansible*
 
 %changelog
+* Mon Mar 27 2017 Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.4.rc1
+- Add python-crypto and python3-crypto as explicit requirements
+
 * Mon Mar 27 2017 Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.3.rc1
 - Add a symlink for ansible executables to be accessed via python major version
   (ie: ansible-3) in addition to python-major-minor (ansible-3.6)