diff --git a/wireguard/.footprint b/wireguard/.footprint
new file mode 100644
index 000000000..8efd88e80
--- /dev/null
+++ b/wireguard/.footprint
@@ -0,0 +1,12 @@
+drwxr-xr-x	root/root	lib/
+drwxr-xr-x	root/root	lib/modules/
+drwxr-xr-x	root/root	lib/modules/<kernel-version>/
+drwxr-xr-x	root/root	lib/modules/<kernel-version>/extra/
+-rw-r--r--	root/root	lib/modules/<kernel-version>/extra/wireguard.ko
+drwxr-xr-x	root/root	usr/
+drwxr-xr-x	root/root	usr/bin/
+-rwxr-xr-x	root/root	usr/bin/wg
+drwxr-xr-x	root/root	usr/share/
+drwxr-xr-x	root/root	usr/share/man/
+drwxr-xr-x	root/root	usr/share/man/man8/
+-rw-r--r--	root/root	usr/share/man/man8/wg.8.gz
diff --git a/wireguard/.signature b/wireguard/.signature
new file mode 100644
index 000000000..6076b6103
--- /dev/null
+++ b/wireguard/.signature
@@ -0,0 +1,5 @@
+untrusted comment: verify with /etc/ports/contrib.pub
+RWSagIOpLGJF31Si4blaNzhChUUbLx6QjriE9h6mHj6L5Bu3Eag25hvllbbb6/gMO6NlPZsT9oVDbfqyioWzlTQTMunkBu78aws=
+SHA256 (Pkgfile) = 85d418c5cfabc2d6e56a162e9acf448b9bd90ab17cacfd8b3b84f2fe575e3568
+SHA256 (.footprint) = d0016fbd53212eddba4f3e8417e8d5b72bcfa4b294b774b3fb8061ef01d9acf8
+SHA256 (WireGuard-0.0.20180809.tar.xz) = 3e351c42d22de427713f1da06d21189c5896a694a66cf19233a7c33295676f19
diff --git a/wireguard/Pkgfile b/wireguard/Pkgfile
new file mode 100644
index 000000000..96d21f3e6
--- /dev/null
+++ b/wireguard/Pkgfile
@@ -0,0 +1,20 @@
+# Description:	WireGuard userspace tool and out-of-tree kernel module
+# URL:		https://www.wireguard.com/
+# Maintainer:	Fredrik Rinnestam, fredrik at crux dot guru
+# Depends on:	libmnl
+
+name=wireguard
+version=0.0.20180809
+release=1
+source=(https://git.zx2c4.com/WireGuard/snapshot/WireGuard-$version.tar.xz)
+
+build() {
+	cd WireGuard-$version/src
+	make
+	make DESTDIR=$PKG -C tools install
+
+        install -d $PKG/lib/modules/$(uname -r)/extra
+        install -m 0644 *.ko $PKG/lib/modules/$(uname -r)/extra/
+
+	rm -r $PKG/usr/share/bash-completion
+}
diff --git a/wireguard/README b/wireguard/README
new file mode 100644
index 000000000..7a43d9378
--- /dev/null
+++ b/wireguard/README
@@ -0,0 +1,9 @@
+Required kernel config for WireGuard:
+
+[*] Networking support -->
+    Networking options -->
+        [*] TCP/IP networking
+        [*]   IP: Foo (IP protocols) over UDP
+[*] Cryptographic API -->
+    [*] Cryptographic algorithm manager
+