diff --git a/changelog.d/20231214_110904_regis_rsa_error.md b/changelog.d/20231214_110904_regis_rsa_error.md
new file mode 100644
index 0000000..37ea108
--- /dev/null
+++ b/changelog.d/20231214_110904_regis_rsa_error.md
@@ -0,0 +1 @@
+- [Bugfix] Error "'Crypto.PublicKey.RSA.RsaKey object' has no attribute 'dq'" during `tutor config save` was caused by outdated minimum version of the pycryptodome package. To resolve this issue, run `pip install --upgrade pycryptodome`. (by @regisb)
diff --git a/requirements/base.in b/requirements/base.in
index 12f314f..eb60ad6 100644
--- a/requirements/base.in
+++ b/requirements/base.in
@@ -3,6 +3,6 @@ click>=8.0
 jinja2>=2.10
 kubernetes
 mypy
-pycryptodome
+pycryptodome>=3.17.0
 pyyaml>=6.0
 typing-extensions>=4.4.0