diff --git a/pkgs/by-name/sh/shishi/package.nix b/pkgs/by-name/sh/shishi/package.nix
index 7b826ca7bba0..bf07955faa96 100644
--- a/pkgs/by-name/sh/shishi/package.nix
+++ b/pkgs/by-name/sh/shishi/package.nix
@@ -30,7 +30,11 @@ stdenv.mkDerivation (finalAttrs: {
 
   separateDebugInfo = true;
 
-  nativeBuildInputs = [ pkg-config ];
+  nativeBuildInputs = [
+    libgcrypt
+    pkg-config
+  ];
+
   buildInputs = [
     libgcrypt
     libgpg-error
@@ -79,6 +83,8 @@ stdenv.mkDerivation (finalAttrs: {
     -e 's,\(-ltasn1\),-L${libtasn1.out}/lib \1,'
   '';
 
+  strictDeps = true;
+
   meta = {
     homepage = "https://www.gnu.org/software/shishi/";
     description = "Implementation of the Kerberos 5 network security system";