diff --git a/pkgs/development/libraries/libgcrypt/default.nix b/pkgs/development/libraries/libgcrypt/default.nix
index 8ea05dc73a32..535367011a8a 100644
--- a/pkgs/development/libraries/libgcrypt/default.nix
+++ b/pkgs/development/libraries/libgcrypt/default.nix
@@ -10,5 +10,5 @@ stdenv.mkDerivation {
     sha256 = "0ip0bjhnn12lvb050j91x64wfhmpk7xlc3p93mxi9g2qczg413nz";
   };
 
-  buildInputs = [libgpgerror];
+  propagatedBuildInputs = [libgpgerror];
 }
diff --git a/pkgs/tools/security/bmrsa/11.nix b/pkgs/tools/security/bmrsa/11.nix
new file mode 100644
index 000000000000..dd1b8831bb79
--- /dev/null
+++ b/pkgs/tools/security/bmrsa/11.nix
@@ -0,0 +1,32 @@
+args : with args; with builderDefs {src="";} null;
+	let localDefs = builderDefs (rec {
+		src = /* put a fetchurl here */
+		fetchurl {
+			url = http://prdownloads.sourceforge.net/sourceforge/bmrsa/bmrsa11.zip;
+			sha256 = "0ksd9xkvm9lkvj4yl5sl0zmydp1wn3xhc55b28gj70gi4k75kcl4";
+		};
+
+		buildInputs = [unzip];
+		configureFlags = [];
+		doUnpack = FullDepEntry (''
+			mkdir bmrsa
+			cd bmrsa 
+			unzip ${src}
+			sed -e 's/gcc/g++/' -i Makefile
+			ensureDir $out/bin
+			echo -e 'install:\n\tcp bmrsa '$out'/bin' >> Makefile
+		'') ["minInit" "addInputs" "defEnsureDir"];
+	}) null; /* null is a terminator for sumArgs */
+	in with localDefs;
+stdenv.mkDerivation rec {
+	name = "bmrsa-"+version;
+	builder = writeScript (name + "-builder")
+		(textClosure localDefs 
+			[doMakeInstall doForceShare doPropagate]);
+	meta = {
+		description = "
+		RSA utility.
+";
+		inherit src;
+	};
+}
diff --git a/pkgs/tools/security/ssss/0.5.nix b/pkgs/tools/security/ssss/0.5.nix
new file mode 100644
index 000000000000..eedb788c777d
--- /dev/null
+++ b/pkgs/tools/security/ssss/0.5.nix
@@ -0,0 +1,31 @@
+args : with args; with builderDefs {src="";} null;
+	let localDefs = builderDefs (rec {
+		src = /* put a fetchurl here */
+		fetchurl {
+			url = http://point-at-infinity.org/ssss/ssss-0.5.tar.gz;
+			sha256 = "15grn2fp1x8p92kxkwbmsx8rz16g93y9grl3hfqbh1jn21ama5jx";
+		};
+
+		buildInputs = [gmp];
+		configureFlags = [];
+		doPatch = FullDepEntry (''
+			sed -e s@/usr/@$out/@g -i Makefile
+			cp ssss.manpage.xml ssss.1
+			cp ssss.manpage.xml ssss.1.html
+			ensureDir $out/bin $out/share/man/man1
+			echo -e 'install:\n\tcp ssss-combine ssss-split '"$out"'/bin' >>Makefile
+		'') ["minInit" "doUnpack" "defEnsureDir"];
+	}) null; /* null is a terminator for sumArgs */
+	in with localDefs;
+stdenv.mkDerivation rec {
+	name = "ssss-"+version;
+	builder = writeScript (name + "-builder")
+		(textClosure localDefs 
+			["doPatch" doMakeInstall doForceShare doPropagate]);
+	meta = {
+		description = "
+		Shamir Secret Sharing Scheme
+";
+		inherit src;
+	};
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 09db9cabda22..8454664e709a 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -403,6 +403,12 @@ rec {
     inherit fetchurl stdenv python wxPython26;
   };
 
+  bmrsaFun = lib.sumArgs (selectVersion ../tools/security/bmrsa "11") {
+    inherit builderDefs unzip;
+  };
+
+  bmrsa = bmrsaFun null;
+
   bogofilter = import ../tools/misc/bogofilter {
     inherit fetchurl stdenv flex;
     bdb = db4;
@@ -848,6 +854,12 @@ rec {
     inherit fetchurl stdenv ncurses;
   };
 
+  seccureFun = lib.sumArgs (selectVersion ../tools/security/seccure "0.3") {
+    inherit builderDefs libgcrypt;
+  };
+
+  seccure = seccureFun null;
+
   sharutils = selectVersion ../tools/archivers/sharutils "4.6.3" {
     inherit fetchurl stdenv;
   };
@@ -892,6 +904,12 @@ rec {
     tlsSupport = true;
   };
 
+  ssssFun = lib.sumArgs (selectVersion ../tools/security/ssss "0.5") {
+    inherit builderDefs gmp;
+  };
+
+  ssss = ssssFun null;
+
   su = import ../tools/misc/su {
     inherit fetchurl stdenv pam;
   };