diff --git a/lang/python/python-pynacl/Makefile b/lang/python/python-pynacl/Makefile
index 18778aea08..cc0eca5afd 100644
--- a/lang/python/python-pynacl/Makefile
+++ b/lang/python/python-pynacl/Makefile
@@ -1,11 +1,11 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=python-pynacl
-PKG_VERSION:=1.6.1
+PKG_VERSION:=1.6.2
 PKG_RELEASE:=1
 
 PYPI_NAME:=pynacl
-PKG_HASH:=8d361dac0309f2b6ad33b349a56cd163c98430d409fa503b10b70b3ad66eaa1d
+PKG_HASH:=018494d6d696ae03c7e656e5e74cdfd8ea1326962cc401bcf018f1ed8436811c
 
 PKG_MAINTAINER:=Javier Marcet <javier@marcet.info>
 PKG_LICENSE:=Apache-2.0
diff --git a/lang/python/python-pynacl/test.sh b/lang/python/python-pynacl/test.sh
new file mode 100755
index 0000000000..8839609048
--- /dev/null
+++ b/lang/python/python-pynacl/test.sh
@@ -0,0 +1,28 @@
+#!/bin/sh
+
+[ "$1" = python3-pynacl ] || exit 0
+
+python3 - << 'EOF'
+import nacl.secret
+import nacl.utils
+import nacl.public
+
+# Secret-key encryption (SecretBox)
+key = nacl.utils.random(nacl.secret.SecretBox.KEY_SIZE)
+box = nacl.secret.SecretBox(key)
+message = b"secret message"
+encrypted = box.encrypt(message)
+decrypted = box.decrypt(encrypted)
+assert decrypted == message
+
+# Public-key encryption (Box)
+alice_priv = nacl.public.PrivateKey.generate()
+bob_priv = nacl.public.PrivateKey.generate()
+alice_box = nacl.public.Box(alice_priv, bob_priv.public_key)
+bob_box = nacl.public.Box(bob_priv, alice_priv.public_key)
+
+msg = b"hello bob"
+enc = alice_box.encrypt(msg)
+dec = bob_box.decrypt(enc)
+assert dec == msg
+EOF