Confirming this bug on Debian Stretch, deborphan 1.7.28.8-0.3+b1 $ deborphan --guess-all |grep cffi python3-cffi-backend:amd64 python-cffi-backend:amd64
$ aptitude why python3-cffi-backend:amd64 i python3-cryptography Depends python3-cffi-backend-api-min (<= 9729) i A python3-cffi-backend Provides python3-cffi-backend-api-min $ aptitude why python-cffi-backend:amd64 i ansible Depends python-cryptography i A python-cryptography Depends python-cffi-backend-api-min (<= 9729) i A python-cffi-backend Provides python-cffi-backend-api-min