diff --git a/audit-1.8-crypto.patch b/audit-1.8-crypto.patch
new file mode 100644
index 0000000..dea5d4b
--- /dev/null
+++ b/audit-1.8-crypto.patch
@@ -0,0 +1,32 @@
+Index: /trunk/lib/libaudit.h
+===================================================================
+--- /trunk/lib/libaudit.h (revision 171)
++++ /trunk/lib/libaudit.h (revision 234)
+@@ -227,4 +227,12 @@
+ 
+ #define AUDIT_FIRST_CRYPTO_MSG		2400
++#define AUDIT_CRYPTO_TEST_USER		2400 /* Crypto test results */
++#define AUDIT_CRYPTO_PARAM_CHANGE_USER	2401 /* Crypto attribute change */
++#define AUDIT_CRYPTO_LOGIN		2402 /* Logged in as crypto officer */
++#define AUDIT_CRYPTO_LOGOUT		2403 /* Logged out from crypto */
++#define AUDIT_CRYPTO_KEY_USER		2404 /* Create,delete,negotiate */
++#define AUDIT_CRYPTO_FAILURE_USER	2405 /* Fail decrypt,encrypt,randomiz */
++#define AUDIT_CRYPTO_REPLAY_USER	2406 /* Crypto replay detected */
++
+ #define AUDIT_LAST_CRYPTO_MSG		2499
+ 
+Index: /trunk/lib/msg_typetab.h
+===================================================================
+--- /trunk/lib/msg_typetab.h (revision 171)
++++ /trunk/lib/msg_typetab.h (revision 234)
+@@ -175,3 +175,10 @@
+ _S(AUDIT_FS_RELABEL,                 "FS_RELABEL"                    )
+ _S(AUDIT_USER_MAC_POLICY_LOAD,       "USER_MAC_POLICY_LOAD"          )
++_S(AUDIT_CRYPTO_TEST_USER,           "CRYPTO_TEST_USER"              )
++_S(AUDIT_CRYPTO_PARAM_CHANGE_USER,   "CRYPTO_PARAM_CHANGE_USER"      )
++_S(AUDIT_CRYPTO_LOGIN,               "CRYPTO_LOGIN"                  )
++_S(AUDIT_CRYPTO_LOGOUT,              "CRYPTO_LOGOUT"                 )
++_S(AUDIT_CRYPTO_KEY_USER,            "CRYPTO_KEY_USER"               )
++_S(AUDIT_CRYPTO_FAILURE_USER,        "CRYPTO_FAILURE_USER"           )
++_S(AUDIT_CRYPTO_REPLAY_USER,         "CRYPTO_REPLAY_USER"            )
+ 
diff --git a/audit.spec b/audit.spec
index 9e2b1d4..2a36258 100644
--- a/audit.spec
+++ b/audit.spec
@@ -1,7 +1,7 @@
 %define audit_version 1.7.11
-%define audit_release 1%{?dist}
+%define audit_release 2%{?dist}
 %define sca_version 0.4.8
-%define sca_release 14
+%define sca_release 15
 %{!?python_sitelib: %define python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")}
 
 Summary: User space tools for 2.6 kernel auditing
@@ -12,6 +12,7 @@ License: GPLv2+
 Group: System Environment/Daemons
 URL: http://people.redhat.com/sgrubb/audit/
 Source0: http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz
+Patch1: audit-1.8-crypto.patch
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 BuildRequires: gettext-devel intltool libtool swig python-devel
 BuildRequires: tcp_wrappers-devel 
@@ -89,6 +90,7 @@ A graphical utility for editing audit configuration.
 
 %prep
 %setup -q
+%patch1 -p2
 
 %build
 %configure --sbindir=/sbin --libdir=/%{_lib} --with-prelude --with-libwrap --enable-gssapi-krb5=no
@@ -259,6 +261,9 @@ fi
 %config(noreplace) %{_sysconfdir}/security/console.apps/system-config-audit-server
 
 %changelog
+* Tue Jan 13 2009 Steve Grubb <sgrubb@redhat.com> 1.7.11-2
+- Add crypto event definitions
+
 * Sat Jan 10 2009 Steve Grubb <sgrubb@redhat.com> 1.7.11-1
 - New upstream release