diff --git a/openwrt_patches-21.02/107-strongswan-5_9_11-upgrade.patch b/openwrt_patches-21.02/107-strongswan-5_9_11-upgrade.patch
index be7e80a..1284aee 100644
--- a/openwrt_patches-21.02/107-strongswan-5_9_11-upgrade.patch
+++ b/openwrt_patches-21.02/107-strongswan-5_9_11-upgrade.patch
@@ -2574,3 +2574,24 @@
 - 	if (trusted)
 - 	{
 - 		result->merge(result, auth, FALSE);
+--- a/package/kernel/linux/modules/crypto.mk
++++ b/package/kernel/linux/modules/crypto.mk
+@@ -95,6 +95,18 @@ endef
+ $(eval $(call KernelPackage,crypto-ccm))
+ 
+ 
++define KernelPackage/crypto-chacha20poly1305
++  TITLE:=ChaCha20-Poly1305 AEAD support, RFC7539 (used by strongSwan IPsec VPN)
++  DEPENDS:=+kmod-crypto-aead +kmod-crypto-manager
++  KCONFIG:=CONFIG_CRYPTO_CHACHA20POLY1305
++  FILES:=$(LINUX_DIR)/crypto/chacha20poly1305.ko
++  AUTOLOAD:=$(call AutoLoad,09,chacha20poly1305)
++  $(call AddDepends/crypto)
++endef
++
++$(eval $(call KernelPackage,crypto-chacha20poly1305))
++
++
+ define KernelPackage/crypto-cmac
+   TITLE:=Support for Cipher-based Message Authentication Code (CMAC)
+   DEPENDS:=+kmod-crypto-hash