diff --git a/pkgs/development/libraries/sqlcipher/default.nix b/pkgs/development/libraries/sqlcipher/default.nix
index bc30716e81f6..c1f624f8744d 100644
--- a/pkgs/development/libraries/sqlcipher/default.nix
+++ b/pkgs/development/libraries/sqlcipher/default.nix
@@ -1,25 +1,29 @@
-{ stdenv, fetchurl, openssl, tcl, readline ? null, ncurses ? null }:
+{ stdenv, lib, fetchFromGitHub, openssl, tcl, readline ? null, ncurses ? null }:
 
 assert readline != null -> ncurses != null;
 
-stdenv.mkDerivation {
-  name = "sqlcipher-3.1.0";
+stdenv.mkDerivation rec {
+  name = "sqlcipher-${version}";
+  version = "3.4.0";
 
-  src = fetchurl {
-    url = "https://github.com/sqlcipher/sqlcipher/archive/v3.1.0.tar.gz";
-    sha256 = "1h54hsl7g6ra955aaqid5wxm93fklx2pxz8abcdwf9md3bpfcn18";
+  src = fetchFromGitHub {
+    owner = "sqlcipher";
+    repo = "sqlcipher";
+    rev = "v${version}";
+    sha256 = "1lwc2m21sax3pnjfqddldbpbwr3b51s91fxz7dd7hf6ly8swnsvp";
   };
 
   buildInputs = [ readline ncurses openssl tcl ];
 
-  configureFlags = "--enable-threadsafe --disable-tcl";
+  configureFlags = [ "--enable-threadsafe" "--disable-tcl" ];
 
-  CFLAGS = "-DSQLITE_ENABLE_COLUMN_METADATA=1 -DSQLITE_SECURE_DELETE=1 -DSQLITE_ENABLE_UNLOCK_NOTIFY=1 -DSQLITE_HAS_CODEC";
-  LDFLAGS = if readline != null then "-lncurses" else "";
+  CFLAGS = [ "-DSQLITE_ENABLE_COLUMN_METADATA=1" "-DSQLITE_SECURE_DELETE=1" "-DSQLITE_ENABLE_UNLOCK_NOTIFY=1" "-DSQLITE_HAS_CODEC" ];
+  LDFLAGS = lib.optional (readline != null) "-lncurses";
 
-  meta = {
+  meta = with stdenv.lib; {
     homepage = http://sqlcipher.net/;
     description = "Full Database Encryption for SQLite";
-    platforms = stdenv.lib.platforms.unix;
+    platforms = platforms.unix;
+    license = licenses.bsd3;
   };
 }