diff --git a/Ports/python3/package.sh b/Ports/python3/package.sh
index 94bc93b8194..3d0156c1919 100755
--- a/Ports/python3/package.sh
+++ b/Ports/python3/package.sh
@@ -6,12 +6,9 @@ port=python3
 version="${PYTHON_VERSION}"
 workdir="Python-${version}"
 useconfigure="true"
-files="${PYTHON_ARCHIVE_URL} ${PYTHON_ARCHIVE}
-https://www.python.org/ftp/python/${version}/Python-${version}.tar.xz.asc Python-${version}.tar.xz.asc
-https://raw.githubusercontent.com/python/cpython/942dd9f3f77eef08fabddbd9fb883a866ad6d4cb/PC/pycon.ico launcher.ico"
-auth_type="sig"
-auth_import_key="E3FF2839C048B25C084DEBE9B26995E310250568"
-auth_opts="Python-${version}.tar.xz.asc Python-${version}.tar.xz"
+files="${PYTHON_ARCHIVE_URL} ${PYTHON_ARCHIVE} ${PYTHON_ARCHIVE_SHA256SUM}
+https://raw.githubusercontent.com/python/cpython/942dd9f3f77eef08fabddbd9fb883a866ad6d4cb/PC/pycon.ico launcher.ico 55c1e1fcabc2f254a6d02242912359d29f141d11c4892c20375d58b6dcd89ac0"
+auth_type="sha256"
 launcher_name="Python"
 launcher_category="Development"
 launcher_command="/usr/local/bin/python3"
diff --git a/Ports/python3/version.sh b/Ports/python3/version.sh
index 50dccfd344e..72714d63302 100644
--- a/Ports/python3/version.sh
+++ b/Ports/python3/version.sh
@@ -1,4 +1,4 @@
 PYTHON_VERSION="3.9.6"
 PYTHON_ARCHIVE="Python-${PYTHON_VERSION}.tar.xz"
 PYTHON_ARCHIVE_URL="https://www.python.org/ftp/python/${PYTHON_VERSION}/${PYTHON_ARCHIVE}"
-PYTHON_ARCHIVE_MD5SUM="ecc29a7688f86e550d29dba2ee66cf80"
+PYTHON_ARCHIVE_SHA256SUM="397920af33efc5b97f2e0b57e91923512ef89fc5b3c1d21dbfc8c4828ce0108a"
diff --git a/Toolchain/BuildPython.sh b/Toolchain/BuildPython.sh
index fa173f2aed8..0fb35f27491 100755
--- a/Toolchain/BuildPython.sh
+++ b/Toolchain/BuildPython.sh
@@ -23,8 +23,8 @@ pushd "${TARBALLS_DIR}"
         echo "${PYTHON_ARCHIVE} already exists, not downloading archive"
     fi
 
-    if ! md5sum --status -c <(echo "${PYTHON_ARCHIVE_MD5SUM}" "${PYTHON_ARCHIVE}"); then
-        echo "Python archive MD5 sum mismatch, please run script again"
+    if ! sha256sum --status -c <(echo "${PYTHON_ARCHIVE_SHA256SUM}" "${PYTHON_ARCHIVE}"); then
+        echo "Python archive SHA256 sum mismatch, please run script again"
         rm -f "${PYTHON_ARCHIVE}"
         exit 1
     fi