`aliyunsdkcore` depends on deprecated `pycrypto`

Error Stack

$ pip install aliyunsdkcore

...
...
...

      configure: creating ./config.status
      config.status: creating src/config.h
      src/_fastmath.c:33:10: fatal error: longintrepr.h: No such file or directory
         33 | #include <longintrepr.h>                                /* for conversions */
            |          ^~~~~~~~~~~~~~~
      compilation terminated.
      error: command '/usr/bin/x86_64-linux-gnu-gcc' failed with exit code 1
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for pycrypto
  Running setup.py clean for pycrypto
Failed to build pycrypto
ERROR: Failed to build installable wheels for some pyproject.toml based projects (pycrypto)

Short Description

The aliyunsdkcore package depends on pycrypto>=2.6.1, which is deprecated, unmaintained, and fails to build on Python 3.13+ due to missing internal Python headers (longintrepr.h).

Impact:

• Breaks installations on modern Python versions (3.13+).
• Security risk due to unpatched vulnerabilities in pycrypto.

Suggested Fix:
Replace pycrypto with the maintained fork pycryptodome (API-compatible drop-in replacement).

Reproduction Steps:

1. Install aliyunsdkcore on Python 3.13.
2. Observe build failure due to pycrypto dependency.

Workaround:
Manually install pycryptodome and remove pycrypto, but this should be fixed upstream.

Additional Notes for the Report

• Link to pycrypto deprecation: PyPI
• pycryptodome is the recommended alternative (used by paramiko, google-auth, etc.).
• Example error:

  src/_fastmath.c:33:10: fatal error: longintrepr.h: No such file or directory
  

This change would improve compatibility and security. Thanks for maintaining the SDK!

DeepSeek helps to generate issue descriptio.

Start by locating the dependency metadata for aliyunsdkcore and confirm where pycrypto is declared. Reproduce installation on Python 3.13, then verify that the maintained replacement is used and that pip install aliyunsdkcore completes without the pycrypto build failure.