diff --git a/srcpkgs/nss/template b/srcpkgs/nss/template
index 5c766a79dd8..fde4f42ded0 100644
--- a/srcpkgs/nss/template
+++ b/srcpkgs/nss/template
@@ -3,7 +3,7 @@
 _nsprver=4.29
 
 pkgname=nss
-version=3.63
+version=3.64
 revision=1
 hostmakedepends="perl"
 makedepends="nspr-devel sqlite-devel zlib-devel"
@@ -13,7 +13,7 @@ maintainer="Đoàn Trần Công Danh <congdanhqx@gmail.com>"
 license="MPL-2.0"
 homepage="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
 distfiles="${MOZILLA_SITE}/security/nss/releases/NSS_${version//\./_}_RTM/src/nss-${version}.tar.gz"
-checksum=182d2fef629102ae9423aabf2c192242b565cf5098e82c5a26cf70c5e4ea2221
+checksum=d3175427172e9c3a6f1ebc74452cb791590f28191c6a1a443dbc0d87c9df1126
 
 export NS_USE_GCC=1
 export LIBRUNPATH=
@@ -44,10 +44,13 @@ do_build() {
 		*) export NSS_DISABLE_AVX2=1 ;;
 	esac
 
-	# it's actually VSX, so disable on all BE ppc
 	case "$XBPS_TARGET_MACHINE" in
 		ppc64le*) ;;
-		ppc*) export NSS_DISABLE_ALTIVEC=1 ;;
+		ppc64*) export NSS_DISABLE_CRYPTO_VSX=1 ;;
+		ppc*)
+			export NSS_DISABLE_CRYPTO_VSX=1
+			export NSS_DISABLE_ALTIVEC=1
+			;;
 	esac
 
 	cd nss