diff --git a/manifest.dhall b/manifest.dhall
index 35f3755ba11cdb826be9f0bff77ae160fe065b50..a9c1f3991c114efe953ad2848cc0bea832ee00b9 100644
--- a/manifest.dhall
+++ b/manifest.dhall
@@ -471,6 +471,7 @@ in  [ callHackage "Cabal" "3.8.1.0"
     , callHackage "prometheus-proc" "0.1.4.0"
     , callHackage "proteaaudio-sdl" "0.9.2"
     , callHackage "psqueues" "0.2.7.3"
+    , callHackage "pureMD5" "2.1.4"
     , callHackage "quickcheck-classes" "0.6.5.0"
     , callHackage "quickcheck-dynamic" "2.0.0"
     , callHackage "quickcheck-instances" "0.3.28"
diff --git a/overlay.nix b/overlay.nix
index 603da056ce8e71e9832dcfe2d71984a461cb7849..0cd6c5ccd0a3cf569e064ffe1b01018e196c7dfd 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -655,6 +655,8 @@ self: with pkgs.haskell.lib; {
 
   psqueues = self.callPackage (./pkgs/psqueues.nix) { };
 
+  pureMD5 = self.callPackage (./pkgs/pureMD5.nix) { };
+
   quickcheck-classes = self.callPackage (./pkgs/quickcheck-classes.nix) { };
 
   quickcheck-dynamic = self.callPackage (./pkgs/quickcheck-dynamic.nix) { };
diff --git a/pkgs/pureMD5.nix b/pkgs/pureMD5.nix
new file mode 100644
index 0000000000000000000000000000000000000000..10b506304f28e35cbf7a801b130ab289b14a6f7b
--- /dev/null
+++ b/pkgs/pureMD5.nix
@@ -0,0 +1,51 @@
+{ mkDerivation
+, base
+, binary
+, bytestring
+, cereal
+, crypto-api
+, crypto-api-tests
+, lib
+, pretty-hex
+, QuickCheck
+, tagged
+, test-framework
+, test-framework-quickcheck2
+}:
+mkDerivation {
+  pname = "pureMD5";
+  version = "2.1.4";
+  sha256 = "782beec0a020e30eae65b7ce735c0cbb3e8bd886e2e564ac9d06f21479df9363";
+  isLibrary = true;
+  isExecutable = false;
+  enableSeparateDataOutput = false;
+  libraryHaskellDepends = [
+    base
+    binary
+    bytestring
+    cereal
+    crypto-api
+    tagged
+  ];
+  testHaskellDepends = [
+    base
+    binary
+    bytestring
+    cereal
+    crypto-api-tests
+    pretty-hex
+    QuickCheck
+    test-framework
+    test-framework-quickcheck2
+  ];
+  enableLibraryProfiling = false;
+  enableExecutableProfiling = false;
+  doHaddock = false;
+  jailbreak = true;
+  doCheck = false;
+  doBenchmark = false;
+  hyperlinkSource = false;
+  description = "A Haskell-only implementation of the MD5 digest (hash) algorithm";
+  license = lib.licenses.bsd3;
+  broken = false;
+}