diff --git a/sys-fs/gocryptfs/Manifest b/sys-fs/gocryptfs/Manifest
new file mode 100644
index 0000000..b52ce5f
--- /dev/null
+++ b/sys-fs/gocryptfs/Manifest
@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+DIST gocryptfs-1.7.tar.gz 8232803 BLAKE2B ea89754b03d47be5e6102e7cf90bad1bc25cff7fc364cff6d62f9eaa439a33a96e3ec2315b24082c1a74ff33b3126b0450964f83a0df9025d1bb5d01f1686b42 SHA512 3555d7d505b7859fefd4c74d7df0dd990a5241bb5feebae2b1ce0bc8b9d10d6dc7e3aef527bb45624c56c20a19f931ff78ee9363fd47e21b8d8f5ca847d2cad2
+-----BEGIN PGP SIGNATURE-----
+
+iQKTBAEBCAB9FiEEcg3s4uUa4XE72XWQvF3CmYqtKyEFAl2U8eRfFIAAAAAALgAo
+aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDcy
+MERFQ0UyRTUxQUUxNzEzQkQ5NzU5MEJDNURDMjk5OEFBRDJCMjEACgkQvF3CmYqt
+KyET5A/+MHyk+Rol3AHEje9QlJoUooRW8kwNub+bgSj3o7/5upTImEeKdHxET/lh
+LfqV8YLzHgmwZnpOpqLwwJZJQnf/xY9f5YZr+5cM+AYxKsYRpq4ACgNDze/pJVMF
+xr2FyzvI/C3w8vQU3cz93npuhj6bshMAHRfxU2GvoZMA8MA755li+UmRJSIvdhCW
+sAqE9UDL3Ktwny+Fv1fkKak7WOHtZYgn1yYOC3o7rh0pLyUsnQB89nhQ4kjjZiaU
+yLjbbQJRYJcRacBHag+0KLXcQYdu0g138/0ZeIn57NI58T+D+PEXGvP+weej6eNh
+kIxl+Zakv0t41dlhPP5Lpz80kyq3YKyR3bB6SA9nQjOfvZtIrP8Hm4O2WTqIOtmq
+7WEQ9OU2XjIXfs1nZaSbm335OT+pA5h5SPO7BWMrq0hCzwVDvlMwluBg8of6I1yo
+zpMYIAyqj18PaxCwzL59mjkoxPM6PTfAltXAX/Y0YvjATtpBwJOC07WYKjaxKORd
++/4gk3GYG+Bh1ZRixF4syR4ZPHLwZ2WJI6hhjMUfAZAnbKTjryWsH/K6Opoylg+4
+JGyixtMw6apVqQWmfU3IXC80wF3JMrS8TruinF4eBqGz/fnWdQ4WTu7FzODptVs9
+77OTcmuOQ46W+23+OiyMfpoZZnsGcCpP2Ma4FNgv8dQB6COqIY8=
+=Wvh8
+-----END PGP SIGNATURE-----
diff --git a/sys-fs/gocryptfs/gocryptfs-1.7.ebuild b/sys-fs/gocryptfs/gocryptfs-1.7.ebuild
new file mode 100644
index 0000000..c952b1c
--- /dev/null
+++ b/sys-fs/gocryptfs/gocryptfs-1.7.ebuild
@@ -0,0 +1,70 @@
+# Copyright 1999-2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Note: For distfiles verification see https://nuetzlich.net/gocryptfs/releases.
+
+EAPI=7
+
+EGO_PN="github.com/rfjakob/${PN}"
+
+inherit golang-vcs-snapshot
+
+DESCRIPTION="Encrypted overlay filesystem written in Go"
+HOMEPAGE="https://nuetzlich.net/gocryptfs"
+SRC_URI="https://${EGO_PN}/releases/download/v${PV}/${PN}_v${PV}_src-deps.tar.gz -> ${P}.tar.gz"
+
+# in detail:
+# BSD           vendor/golang.org/x/sys/LICENSE
+# BSD           vendor/golang.org/x/crypto/LICENSE
+# BSD           vendor/golang.org/x/sync/LICENSE
+# BSD:          vendor/github.com/hanwen/go-fuse/LICENSE
+# BSD-2:        vendor/github.com/pkg/xattr/LICENSE
+# Apache-2.0:   vendor/github.com/rfjakob/eme/LICENSE 
+LICENSE="Apache-2.0 BSD BSD-2 MIT"
+
+SLOT="0"
+KEYWORDS="~amd64"
+
+IUSE="debug libressl +man pie +ssl"
+
+BDEPEND="man? ( dev-go/go-md2man )"
+RDEPEND="
+	sys-fs/fuse
+	ssl? (
+		!libressl? ( dev-libs/openssl:0= )
+		libressl? ( dev-libs/libressl:0= )
+	)
+"
+
+QA_PRESTRIPPED="usr/bin/.*"
+
+G="${WORKDIR}/${P}"
+S="${G}/src/${EGO_PN}"
+
+src_compile() {
+	export GOPATH="${G}"
+	export CGO_CFLAGS="${CFLAGS}"
+	export CGO_LDFLAGS="${LDFLAGS}"
+	local myldflags=(
+		"$(usex !debug '-s -w' '')"
+		-X "main.GitVersion=v${PV}"
+		-X "'main.GitVersionFuse=[vendored]'"
+		-X "main.BuildDate=$(date -u '+%Y-%m-%d')"
+	)
+	local mygoargs=(
+		-v -work -x
+		"-buildmode=$(usex pie pie exe)"
+		"-asmflags=all=-trimpath=${S}"
+		"-gcflags=all=-trimpath=${S}"
+		-ldflags "${myldflags[*]}"
+		-tags "$(usex !ssl 'without_openssl' 'none')"
+	)
+	go build "${mygoargs[@]}" || die
+	use man && go-md2man -in Documentation/MANPAGE.md -out gocryptfs.1
+}
+
+src_install() {
+	dobin gocryptfs
+	use debug && dostrip -x /usr/bin/gocryptfs
+	use man && doman gocryptfs.1
+}
diff --git a/sys-fs/gocryptfs/metadata.xml b/sys-fs/gocryptfs/metadata.xml
new file mode 100644
index 0000000..e2fee86
--- /dev/null
+++ b/sys-fs/gocryptfs/metadata.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+	<maintainer type="person">
+		<email>holgersson@posteo.de</email>
+		<name>Nils Freydank</name>
+	</maintainer>
+	<upstream>
+		<remote-id type="github">rfjakob/gocryptfs</remote-id>
+		<bugs-to>https://github.com/rfjakob/gocryptfs/issues</bugs-to>
+	</upstream>
+	<longdescription lang="en">
+		gocryptfs uses file-based encryption that is implemented as
+		a mountable FUSE filesystem. Each file in gocryptfs is stored
+		one corresponding encrypted file on the hard disk.
+	</longdescription>
+	<use>
+		<flag name="man">Build and install man pages</flag>
+	</use>
+</pkgmetadata>