diff --git a/pkgs/tools/security/rsign2/default.nix b/pkgs/tools/security/rsign2/default.nix
new file mode 100644
index 00000000000..e83fdc7b2bb
--- /dev/null
+++ b/pkgs/tools/security/rsign2/default.nix
@@ -0,0 +1,24 @@
+{ lib
+, rustPlatform
+, fetchCrate
+}:
+
+rustPlatform.buildRustPackage rec {
+  pname = "rsign2";
+  version = "0.6.2";
+
+  src = fetchCrate {
+    inherit pname version;
+    hash = "sha256-Ono7cKXccYMmkrlsJ+Z85w8z0fEduuEQhRlHQQk0vzU=";
+  };
+
+  cargoHash = "sha256-Yuf4iTWGQp/1ZUVqaR0tKfFxKJ9JEmMLq1LL7gwf6w0=";
+
+  meta = with lib; {
+    description = "A command-line tool to sign files and verify signatures";
+    homepage = "https://github.com/jedisct1/rsign2";
+    license = licenses.mit;
+    maintainers = with maintainers; [ figsoda ];
+    mainProgram = "rsign";
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 2567a534bfa..95d7746293e 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -5695,6 +5695,8 @@ with pkgs;
 
   rsbkb = callPackage ../tools/text/rsbkb { };
 
+  rsign2 = callPackage ../tools/security/rsign2 { };
+
   rsyslog = callPackage ../tools/system/rsyslog {
     withHadoop = false; # Currently Broken
     withKsi = false; # Currently Broken