diff --git a/manifest.dhall b/manifest.dhall
index 6f521dd4787ce2ff5f52b30ec4f1027bb7984de3..97c9797761fd3211dcba6ac5b70f2bd7956bc4ae 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -182,6 +182,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "cursor-gen" "0.4.0.0"
     , callHackage "cryptonite" "0.30"
     , callHackage "cryptohash-sha1" "0.11.101.0"
+    , callHackage "cryptohash-sha256" "0.11.102.1"
     , callHackage "cryptohash" "0.11.9"
     , callHackage "daemons" "0.3.0"
     , callHackage "data-clist" "0.2"
diff --git a/overlay.nix b/overlay.nix
index add844e6e3291e6879b64ab09875d3ac6cd513a4..5ffc8a945112d8f7e095e1e9e9552d5dade25aa6 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -195,6 +195,8 @@ self: with pkgs.haskell.lib; {
 
   cryptohash-sha1 = self.callPackage (./pkgs/cryptohash-sha1.nix) { };
 
+  cryptohash-sha256 = self.callPackage (./pkgs/cryptohash-sha256.nix) { };
+
   cryptonite = self.callPackage (./pkgs/cryptonite.nix) { };
 
   cursor = self.callPackage (./pkgs/cursor.nix) { };
diff --git a/pkgs/cryptohash-sha256.nix b/pkgs/cryptohash-sha256.nix
new file mode 100644
index 0000000000000000000000000000000000000000..aa88648b98982398395b44fccf971e16aadf4cbc
--- /dev/null
+++ b/pkgs/cryptohash-sha256.nix
@@ -0,0 +1,44 @@
+{ mkDerivation
+, base
+, base16-bytestring
+, bytestring
+, criterion
+, lib
+, SHA
+, tasty
+, tasty-hunit
+, tasty-quickcheck
+}:
+mkDerivation {
+  pname = "cryptohash-sha256";
+  version = "0.11.102.1";
+  sha256 = "73a7dc7163871a80837495039a099967b11f5c4fe70a118277842f7a713c6bf6";
+  revision = "1";
+  editedCabalFile = "1hyzqv30rpj920ddnr0zypyjjlh52vyp2d140pn2byayj820rkgs";
+  configureFlags = [ "-fuse-cbits" ];
+  isLibrary = true;
+  isExecutable = true;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [ base bytestring ];
+  testHaskellDepends = [
+    base
+    base16-bytestring
+    bytestring
+    SHA
+    tasty
+    tasty-hunit
+    tasty-quickcheck
+  ];
+  benchmarkHaskellDepends = [ base bytestring criterion SHA ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  homepage = "https://github.com/hvr/cryptohash-sha256";
+  description = "Fast, pure and practical SHA-256 implementation";
+  license = lib.licenses.bsd3;
+  broken = false;
+}