diff --git a/package/Config.in b/package/Config.in
index ae6ffd7f00..78aa842e3c 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -846,6 +846,7 @@ menu "Networking"
 	source "package/libshout/Config.in"
 	source "package/libsocketcan/Config.in"
 	source "package/libsoup/Config.in"
+	source "package/libsrtp/Config.in"
 	source "package/libstrophe/Config.in"
 	source "package/libtirpc/Config.in"
 	source "package/libtorrent/Config.in"
diff --git a/package/libsrtp/Config.in b/package/libsrtp/Config.in
new file mode 100644
index 0000000000..ce37712f7d
--- /dev/null
+++ b/package/libsrtp/Config.in
@@ -0,0 +1,8 @@
+config BR2_PACKAGE_LIBSRTP
+	bool "libsrtp"
+	help
+	  This package provides an implementation of the Secure
+	  Real-time Transport Protocol (SRTP), the Universal Security
+	  Transform (UST), and a supporting cryptographic kernel.
+
+	  https://github.com/cisco/libsrtp
diff --git a/package/libsrtp/libsrtp.mk b/package/libsrtp/libsrtp.mk
new file mode 100644
index 0000000000..5e622551d1
--- /dev/null
+++ b/package/libsrtp/libsrtp.mk
@@ -0,0 +1,35 @@
+################################################################################
+#
+# libsrtp
+#
+################################################################################
+
+LIBSRTP_VERSION = v1.5.0
+LIBSRTP_SITE = $(call github,cisco,libsrtp,$(LIBSRTP_VERSION))
+LIBSRTP_AUTORECONF = YES
+LIBSRTP_INSTALL_STAGING = YES
+LIBSRTP_LICENSE = BSD-3c
+LIBSRTP_LICENSE_FILES = LICENSE
+
+ifeq ($(BR2_STATIC_LIBS),y)
+LIBSRTP_MAKE_OPTS = libsrtp.a
+else ifeq ($(BR2_SHARED_LIBS),y)
+LIBSRTP_MAKE_OPTS = shared_library
+else
+LIBSRTP_MAKE_OPTS = libsrtp.a shared_library
+endif
+
+# While libsrtp is not using pkg-config itself, it checks if
+# pkg-config is available to determine whether it should install
+# libsrtp.pc. Since installing it seems useful, let's depend on
+# host-pkgconf to make sure pkg-config is installed.
+LIBSRTP_DEPENDENCIES = host-pkgconf
+
+ifeq ($(BR2_PACKAGE_OPENSSL),y)
+LIBSRTP_DEPENDENCIES += openssl
+LIBSRTP_CONF_OPTS += --enable-openssl
+else
+LIBSRTP_CONF_OPTS += --disable-openssl
+endif
+
+$(eval $(autotools-package))