diff --git a/pkgs/development/python-modules/cpace/default.nix b/pkgs/development/python-modules/cpace/default.nix
new file mode 100644
index 000000000000..10892a70ea0a
--- /dev/null
+++ b/pkgs/development/python-modules/cpace/default.nix
@@ -0,0 +1,36 @@
+{
+  lib,
+  buildPythonPackage,
+  cryptography,
+  fetchFromGitHub,
+  hatchling,
+  pytestCheckHook,
+}:
+
+buildPythonPackage rec {
+  pname = "cpace";
+  version = "0.1.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "arturpragacz";
+    repo = "cpace-py";
+    tag = version;
+    hash = "sha256-KHN5bKSk/BoblxLd3HLukq20+M+XgyzV0oST1mQtzTg=";
+  };
+
+  build-system = [ hatchling ];
+
+  dependencies = [ cryptography ];
+
+  nativeCheckInputs = [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "cpace" ];
+
+  meta = {
+    description = "CPace balanced PAKE protocol implementation";
+    homepage = "https://github.com/arturpragacz/cpace-py";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ SuperSandro2000 ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index c72531d6284a..48239f47d243 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -3709,6 +3709,8 @@ self: super: with self; {
 
   coveralls = callPackage ../development/python-modules/coveralls { };
 
+  cpace = callPackage ../development/python-modules/cpace { };
+
   cpe = callPackage ../development/python-modules/cpe { };
 
   cpe-search = callPackage ../development/python-modules/cpe-search { };