1 files changed, 39 insertions, 0 deletions
diff --git a/infra/libkookie/nixpkgs/pkgs/tools/security/scrypt/default.nix b/infra/libkookie/nixpkgs/pkgs/tools/security/scrypt/default.nix
new file mode 100644
index 000000000000..e230b2ee4574
--- /dev/null
+++ b/infra/libkookie/nixpkgs/pkgs/tools/security/scrypt/default.nix
@@ -0,0 +1,39 @@
+{ stdenv, fetchurl, openssl, util-linux, getconf }:
+
+stdenv.mkDerivation rec {
+  pname = "scrypt";
+  version = "1.3.1";
+
+  src = fetchurl {
+    url = "https://www.tarsnap.com/scrypt/${pname}-${version}.tgz";
+    sha256 = "1hnl0r6pmyxiy4dmafmqk1db7wpc0x9rqpzqcwr9d2cmghcj6byz";
+  };
+
+  outputs = [ "out" "lib" "dev" ];
+
+  configureFlags = [ "--enable-libscrypt-kdf" ];
+
+  buildInputs = [ openssl ];
+
+  nativeBuildInputs = [ getconf ];
+
+  patchPhase = ''
+    for f in Makefile.in autotools/Makefile.am libcperciva/cpusupport/Build/cpusupport.sh configure ; do
+      substituteInPlace $f --replace "command -p " ""
+    done
+
+    patchShebangs tests/test_scrypt.sh
+  '';
+
+  doCheck = true;
+  checkTarget = "test";
+  checkInputs = [ util-linux ];
+
+  meta = with stdenv.lib; {
+    description = "Encryption utility";
+    homepage    = "https://www.tarsnap.com/scrypt.html";
+    license     = licenses.bsd2;
+    platforms   = platforms.all;
+    maintainers = with maintainers; [ thoughtpolice ];
+  };
+}