diff --git a/lib/hx509/hxtool.c b/lib/hx509/hxtool.c
index b91fb9592..6fa0b1417 100644
--- a/lib/hx509/hxtool.c
+++ b/lib/hx509/hxtool.c
@@ -1166,6 +1166,8 @@ crypto_select(struct crypto_select_options *opt, int argc, char **argv)
 	    type = HX509_SELECT_DIGEST;
 	else if (strcmp(opt->type_string, "public-sig") == 0)
 	    type = HX509_SELECT_PUBLIC_SIG;
+	else if (strcmp(opt->type_string, "secret") == 0)
+	    type = HX509_SELECT_SECRET_ENC;
 	else
 	    errx(1, "unknown type: %s", opt->type_string);
     } else