diff --git a/pkgs/development/python-modules/sigstore/default.nix b/pkgs/development/python-modules/sigstore/default.nix
index 2447cc0450f5..06eca68ae060 100644
--- a/pkgs/development/python-modules/sigstore/default.nix
+++ b/pkgs/development/python-modules/sigstore/default.nix
@@ -51,6 +51,7 @@ buildPythonPackage (finalAttrs: {
   build-system = [ flit-core ];
 
   pythonRelaxDeps = [
+    "cryptography"
     "sigstore-models"
   ];
 
@@ -83,6 +84,15 @@ buildPythonPackage (finalAttrs: {
 
   pythonImportsCheck = [ "sigstore" ];
 
+  disabledTestPaths = [
+    # AttributeError: module 'cryptography.hazmat.primitives.asymmetric.ec' has no attribute 'SECT163K1'
+    #
+    # Uses ec.SECT163K1 which cryptography 48 removed entirely.
+    # Upstream considers this over-testing (sigstore itself never uses this curve at runtime):
+    # https://github.com/sigstore/sigstore-python/issues/1603
+    "test/unit/internal/test_key_details.py"
+  ];
+
   disabledTests = [
     # Tests require network access
     "test_fail_init_url"