diff --git a/.gitmodules b/.gitmodules
index a769e1d..4e13af8 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -19,6 +19,9 @@
 [submodule "tests/fs-test"]
 	path = tests/fs-test
 	url = https://github.com/sheinz/fs-test
+[submodule "extras/bearssl/BearSSL"]
+	path = extras/bearssl/BearSSL
+	url = https://www.bearssl.org/git/BearSSL
 [submodule "extras/http-parser/http-parser"]
 	path = extras/http-parser/http-parser
 	url = https://github.com/nodejs/http-parser
diff --git a/extras/bearssl/BearSSL b/extras/bearssl/BearSSL
new file mode 160000
index 0000000..6b4cd86
--- /dev/null
+++ b/extras/bearssl/BearSSL
@@ -0,0 +1 @@
+Subproject commit 6b4cd8609450f294071b38f478bec3b6b8c48ce5
diff --git a/extras/bearssl/component.mk b/extras/bearssl/component.mk
new file mode 100644
index 0000000..4e99cb6
--- /dev/null
+++ b/extras/bearssl/component.mk
@@ -0,0 +1,14 @@
+# Component makefile for BearSSL
+
+BEARSSL_DIR = $(bearssl_ROOT)BearSSL/
+INC_DIRS += $(BEARSSL_DIR)inc
+
+# args for passing into compile rule generation
+bearssl_INC_DIR = $(BEARSSL_DIR)inc $(BEARSSL_DIR)src
+bearssl_SRC_DIR = $(BEARSSL_DIR)src $(sort $(dir $(wildcard $(BEARSSL_DIR)src/*/)))
+
+$(eval $(call component_compile_rules,bearssl))
+
+# Helpful error if git submodule not initialised
+$(BEARSSL_DIR):
+	$(error "bearssl git submodule not installed. Please run 'git submodule update --init'")