diff --git a/pkgs/tools/security/cb0cat/default.nix b/pkgs/tools/security/cb0cat/default.nix
new file mode 100644
index 000000000000..e35434f3cc26
--- /dev/null
+++ b/pkgs/tools/security/cb0cat/default.nix
@@ -0,0 +1,23 @@
+{ stdenv, fetchurl }:
+
+stdenv.mkDerivation rec {
+  name    = "cb0cat-${version}";
+  version = "20131216153906";
+
+  src = fetchurl {
+    url    = "https://www.cblnk.com/cb0cat/dist/${name}.tgz";
+    sha256 = "182767nxfyiis7ac8bn5v8rxb9vlly8n5w42pz1dd0751xwdlp82";
+  };
+
+  installPhase = ''
+    mkdir -p $out/bin
+    mv cb0cat $out/bin
+  '';
+
+  meta = {
+    description = "cryptographic tool based on the CBEAMr0 sponge function";
+    homepage    = "https://www.cblnk.com";
+    license     = stdenv.lib.licenses.bsd3;
+    maintainers = [ stdenv.lib.maintainers.thoughtpolice ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 44a23e828dfd..e7b9a078a8ae 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -424,6 +424,8 @@ let
 
   aescrypt = callPackage ../tools/misc/aescrypt { };
 
+  cb0cat = callPackage ../tools/security/cb0cat { };
+
   ahcpd = callPackage ../tools/networking/ahcpd { };
 
   aircrackng = callPackage ../tools/networking/aircrack-ng { };