diff --git a/baselibs.conf b/baselibs.conf
index 7819b67..44b405c 100644
--- a/baselibs.conf
+++ b/baselibs.conf
@@ -1 +1,2 @@
 libcryptsetup4
+libcryptsetup4-hmac
diff --git a/cryptsetup.changes b/cryptsetup.changes
index 0858125..b8e6f27 100644
--- a/cryptsetup.changes
+++ b/cryptsetup.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Aug 11 15:21:03 UTC 2014 - meissner@suse.com
+
+- libcryptsetup4-hmac split off contain the hmac for FIPS certification
+
+-------------------------------------------------------------------
 Tue May 27 14:38:57 UTC 2014 - meissner@suse.com
 
 - version 1.6.4
diff --git a/cryptsetup.spec b/cryptsetup.spec
index 2b29584..4dd4c66 100644
--- a/cryptsetup.spec
+++ b/cryptsetup.spec
@@ -25,7 +25,7 @@ License:        SUSE-GPL-2.0-with-openssl-exception and LGPL-2.0+
 Group:          System/Base
 
 Source:         https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/cryptsetup-%{version}.tar.xz
-# this is the signature of the uncompressed tarball
+# GPG signature of the uncompressed tarball.
 Source1:        https://www.kernel.org/pub/linux/utils/cryptsetup/v1.6/cryptsetup-%{version}.tar.sign
 Source2:        baselibs.conf
 Source3:        %{name}.keyring
@@ -60,6 +60,14 @@ volumes as well as LUKS formatted ones. The package additionally
 includes support for automatically setting up encrypted volumes at boot
 time via the config file /etc/crypttab.
 
+%package -n libcryptsetup4-hmac
+Summary:        Checksums for libcryptsetup4
+Group:          System/Base
+
+%description  -n libcryptsetup4-hmac
+This package contains HMAC checksums for integrity checking of libcryptsetup4,
+used for FIPS.
+
 %package -n libcryptsetup-devel
 Summary:        Set Up dm-crypt Based Encrypted Block Devices
 Group:          Development/Libraries/C and C++
@@ -146,6 +154,9 @@ fi
 %files -n libcryptsetup4
 %defattr(-,root,root)
 /%{_libdir}/libcryptsetup.so.4*
+
+%files -n libcryptsetup4-hmac
+%defattr(-,root,root)
 /%{_libdir}/.libcryptsetup.so.4*hmac
 
 %files -n libcryptsetup-devel