diff --git a/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2/0001-encrypt_secret.py-switch-to-python3.patch b/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2/0001-encrypt_secret.py-switch-to-python3.patch
new file mode 100644
index 0000000..2ef8036
--- /dev/null
+++ b/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2/0001-encrypt_secret.py-switch-to-python3.patch
@@ -0,0 +1,32 @@
+From 480648bd9a516fc84b02d0b83ebccf40547e5dd0 Mon Sep 17 00:00:00 2001
+From: Yi Zhao <yi.zhao@windriver.com>
+Date: Fri, 13 Mar 2020 20:17:46 +0800
+Subject: [PATCH] encrypt_secret.py: switch to python3
+
+Upstream-Status: Submitted [https://github.com/jiazhang0/cryptfs-tpm2/pull/7]
+
+Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
+---
+ scripts/encrypt_secret.py.in | 3 +--
+ 1 file changed, 1 insertion(+), 2 deletions(-)
+
+diff --git a/scripts/encrypt_secret.py.in b/scripts/encrypt_secret.py.in
+index 1ddb76d..ffd3213 100755
+--- a/scripts/encrypt_secret.py.in
++++ b/scripts/encrypt_secret.py.in
+@@ -1,11 +1,10 @@
+-#!/usr/bin/env python
++#!/usr/bin/env python3
+ #coding: UTF-8
+ 
+ '''
+ The simple encryption/decryption for secret info
+ '''
+ 
+-from __future__ import print_function
+ import logging
+ import argparse
+ import struct
+-- 
+2.7.4
+
diff --git a/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2_git.bb b/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2_git.bb
index 94b81aa..e36e2f2 100644
--- a/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2_git.bb
+++ b/meta-encrypted-storage/recipes-tpm/cryptfs-tpm2/cryptfs-tpm2_git.bb
@@ -22,6 +22,7 @@ PV = "0.7.0+git${SRCPV}"
 SRC_URI = "\
     git://github.com/jiazhang0/cryptfs-tpm2.git \
     file://0001-luks-setup.sh-Add-support-for-qemu-with-the-swtpm.patch \
+    file://0001-encrypt_secret.py-switch-to-python3.patch \
 "
 SRCREV = "87c35c63090a33d4de437f518b8da9f2d1f1d828"