diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 0fb6ec471..3e91b67b2 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,13 @@
 Changelog
 *********
 
+1.10.0 -- 2022-06-20
+====================
+
+Maintenance
+-----------
+* Pin ``cryptography`` to last version that supports Python2
+
 1.9.0 -- 2021-05-27
 ===================
 
diff --git a/src/aws_encryption_sdk/identifiers.py b/src/aws_encryption_sdk/identifiers.py
index 3ae38d96e..953c84025 100644
--- a/src/aws_encryption_sdk/identifiers.py
+++ b/src/aws_encryption_sdk/identifiers.py
@@ -27,7 +27,7 @@
     # We only actually need these imports when running the mypy checks
     pass
 
-__version__ = "1.9.0"
+__version__ = "1.10.0"
 USER_AGENT_SUFFIX = "AwsEncryptionSdkPython/{}".format(__version__)
 
 
diff --git a/test/functional/test_f_aws_encryption_sdk_client.py b/test/functional/test_f_aws_encryption_sdk_client.py
index a43e44796..88ec96c92 100644
--- a/test/functional/test_f_aws_encryption_sdk_client.py
+++ b/test/functional/test_f_aws_encryption_sdk_client.py
@@ -15,6 +15,7 @@
 
 import io
 import logging
+from distutils.version import StrictVersion
 
 import attr
 import botocore.client
@@ -823,7 +824,7 @@ def _assert_deprecated_but_not_yet_removed(logcap, instance, attribute_name, err
 
 def _assert_decrypted_and_removed(instance, attribute_name, removed_in):
     assert not hasattr(instance, attribute_name)
-    assert aws_encryption_sdk.__version__ >= removed_in
+    assert StrictVersion(aws_encryption_sdk.__version__) >= StrictVersion(removed_in)
 
 
 @pytest.mark.parametrize("attribute, no_later_than", (("body_start", "1.4.0"), ("body_end", "1.4.0")))
@@ -836,7 +837,7 @@ def test_decryptor_deprecated_attributes(caplog, attribute, no_later_than):
         decrypted = decryptor.read()
 
     assert decrypted == plaintext
-    if aws_encryption_sdk.__version__ < no_later_than:
+    if StrictVersion(aws_encryption_sdk.__version__) < StrictVersion(no_later_than):
         _assert_deprecated_but_not_yet_removed(
             logcap=caplog,
             instance=decryptor,