diff --git a/CMakeModules/CPMUtil.cmake b/CMakeModules/CPMUtil.cmake
index fadb3c951c..203a3164d1 100644
--- a/CMakeModules/CPMUtil.cmake
+++ b/CMakeModules/CPMUtil.cmake
@@ -58,7 +58,9 @@ function(AddPackage)
         set(PKG_KEY ${PKG_ARGS_KEY})
     endif()
 
-    set(PKG_HASH "SHA512=${PKG_ARGS_HASH}")
+    if (DEFINED PKG_ARGS_HASH)
+        set(PKG_HASH "SHA512=${PKG_ARGS_HASH}")
+    endif()
 
     # Default behavior is bundled
     if (DEFINED PKG_ARGS_SYSTEM_PACKAGE)
diff --git a/CMakeModules/DownloadExternals.cmake b/CMakeModules/DownloadExternals.cmake
index c46cd4cd3c..5f98a03204 100644
--- a/CMakeModules/DownloadExternals.cmake
+++ b/CMakeModules/DownloadExternals.cmake
@@ -34,6 +34,7 @@ function(download_bundled_external remote_path lib_name cpm_key prefix_var)
         URL ${full_url}
         DOWNLOAD_ONLY YES
         KEY ${CACHE_KEY}
+        # TODO(crueter): hash
     )
 
     set(${prefix_var} "${${cpm_key}_SOURCE_DIR}" PARENT_SCOPE)
diff --git a/externals/CMakeLists.txt b/externals/CMakeLists.txt
index 8e86a7452b..0b33392ea1 100644
--- a/externals/CMakeLists.txt
+++ b/externals/CMakeLists.txt
@@ -209,9 +209,9 @@ AddPackage(
 
 AddPackage(
     NAME sirit
-    REPO "ReinUsesLisp/sirit"
-    SHA d7ad93a888
-    HASH 4532125b180729b13dcc2a0418f36ad5e902b1a628ca3d85adca64547442800a30a6eb8efe45e186c020986f27a6f6a53083a4b74dd58cb19eb5657d5cbaaa71
+    REPO "yuzu-mirror/sirit"
+    SHA 4ab79a8c02
+    HASH 1eb6de5b9ee8ded578c4d97ef207d71ad29b5dbb50ab6dd7f05b19143e08822e3e37be61dd42f68dff9ed357dbd3b5c6b40ad2b88de656529bc78ce26f8e3666
     OPTIONS
         "SIRIT_USE_SYSTEM_SPIRV_HEADERS ON"
     SYSTEM_PACKAGE ON