diff --git a/.gitignore b/.gitignore
index 76b40ba7e..c861e9837 100644
--- a/.gitignore
+++ b/.gitignore
@@ -76,6 +76,7 @@ compile
 config.guess
 config.h
 config.h.in
+!src/sig_picnic/external/config.h.in
 config.log
 config.status
 config.sub
@@ -97,3 +98,4 @@ stamp-h1
 #params
 sample_params
 data/
+
diff --git a/src/sig_picnic/external/config.h.in b/src/sig_picnic/external/config.h.in
new file mode 100644
index 000000000..1db6eada0
--- /dev/null
+++ b/src/sig_picnic/external/config.h.in
@@ -0,0 +1,17 @@
+#ifndef PICNIC_CONFIG_H
+#define PICNIC_CONFIG_H
+
+/* from cmake checks */
+
+#cmakedefine HAVE_SYS_AUXV_H
+#cmakedefine HAVE_ASM_HWCAP_H
+#cmakedefine HAVE_SYS_RANDOM_H
+
+#cmakedefine HAVE_ALIGNED_ALLOC
+#cmakedefine HAVE_POSIX_MEMALIGN
+#cmakedefine HAVE_MEMALIGN
+#cmakedefine HAVE_GETRANDOM
+
+#cmakedefine HAVE_SECURITY_FRAMEWORK
+
+#endif