{ pkgs,
  lib,
  stdenv,
  makeWrapper,
  openssl,
  yubikey-personalization,
  cryptsetup,
}:

let
  inherit (nixpkgs) callPackage pkgs stdenv;
  pbkdf2Sha512 = callPackage ./pbkdf2-sha512.nix { };
in
stdenv.mkDerivation {
  name = "ykfde";
  src = ./scripts;
  nativeBuildInputs = [ makeWrapper ];
  installPhase = ''
    install -D --target $out/bin *
  '';
  postInstall = ''
    wrapProgram $out/bin/ykfde-enroll --prefix PATH : ${lib.makeBinPath [openssl, yubikey-personalization, cryptsetup, pbkdf2Sha512]}
  '';
}