diff --git a/package/Config.in b/package/Config.in
index 50cfbfccc1..a2b0d885a7 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -2873,6 +2873,7 @@ menu "System tools"
 	source "package/s6-linux-utils/Config.in"
 	source "package/s6-portable-utils/Config.in"
 	source "package/s6-rc/Config.in"
+	source "package/sbctl/Config.in"
 	source "package/scrub/Config.in"
 	source "package/scrypt/Config.in"
 	source "package/sdbus-cpp/Config.in"
diff --git a/package/sbctl/Config.in b/package/sbctl/Config.in
new file mode 100644
index 0000000000..9c6d2e5858
--- /dev/null
+++ b/package/sbctl/Config.in
@@ -0,0 +1,16 @@
+config BR2_PACKAGE_SBCTL
+	bool "sbctl"
+	depends on BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS
+	depends on BR2_TOOLCHAIN_HAS_THREADS # pcsc-lite
+	depends on BR2_USE_MMU # pcsc-lite
+	depends on !BR2_STATIC_LIBS # pcsc-lite
+	depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # pcsc-lite
+	select BR2_PACKAGE_HOST_GO
+	select BR2_PACKAGE_PCSC_LITE # yubikey
+	help
+	  sbctl intends to be a user-friendly secure boot key manager
+	  capable of setting up secure boot, offer key management
+	  capabilities, and keep track of files that needs to be
+	  signed in the boot chain.
+
+	  https://github.com/Foxboron/sbctl
diff --git a/package/sbctl/sbctl.hash b/package/sbctl/sbctl.hash
new file mode 100644
index 0000000000..50a4fe35c1
--- /dev/null
+++ b/package/sbctl/sbctl.hash
@@ -0,0 +1,3 @@
+# Locally computed
+sha256  640041d66a5040af15a4f152bd1d548813a5fe32341d61826f3d36948a0a5903  sbctl-0.18-go2.tar.gz
+sha256  aa55890164499f96de74b061b04ebc17da026d5962ae9d39180f4ba2833db9fb  LICENSE
diff --git a/package/sbctl/sbctl.mk b/package/sbctl/sbctl.mk
new file mode 100644
index 0000000000..4fdc080943
--- /dev/null
+++ b/package/sbctl/sbctl.mk
@@ -0,0 +1,14 @@
+################################################################################
+#
+# sbctl
+#
+################################################################################
+
+SBCTL_VERSION = 0.18
+SBCTL_SITE = $(call github,foxboron,sbctl,$(SBCTL_VERSION))
+SBCTL_LICENSE = MIT
+SBCTL_LICENSE_FILES = LICENSE
+SBCTL_BUILD_TARGETS = cmd/sbctl
+SBCTL_DEPENDENCIES = pcsc-lite
+
+$(eval $(golang-package))