Add PGP signature check

2 files changed, 7 insertions, 3 deletions

diff --git a/.SRCINFO b/.SRCINFO
index e57308f685ad..9c05a960e857 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,5 +1,5 @@
 # Generated by mksrcinfo v8
-# Mon Jul 10 18:44:27 UTC 2017
+# Mon Jul 10 19:14:51 UTC 2017
 pkgbase = libtomcrypt
 	pkgdesc = A fairly comprehensive, modular and portable cryptographic toolkit
 	pkgver = 1.18.0rc1
@@ -11,7 +11,9 @@ pkgbase = libtomcrypt
 	depends = libtommath
 	depends = gmp
 	source = https://github.com/libtom/libtomcrypt/releases/download/v1.18.0-rc1/crypt-1.18.0-rc1.tar.xz
+	source = https://github.com/libtom/libtomcrypt/releases/download/v1.18.0-rc1/crypt-1.18.0-rc1.tar.xz.asc
 	sha256sums = 943af136e6c624371659dc6c98a2d749ea45912628717b72e4f8894339709b20
+	sha256sums = SKIP
 
 pkgname = libtomcrypt
 
diff --git a/PKGBUILD b/PKGBUILD
index 92b44da2cc71..bb00c496dd64 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -11,8 +11,10 @@ arch=('i686' 'x86_64')
 url="http://www.libtom.net/LibTomCrypt/"
 license=('custom:PublicDomain')
 depends=('libtommath' 'gmp')
-source=("https://github.com/libtom/${pkgname}/releases/download/v${_pkgver}/${pkgname#libtom}-${_pkgver}.tar.xz")
-sha256sums=('943af136e6c624371659dc6c98a2d749ea45912628717b72e4f8894339709b20')
+source=("https://github.com/libtom/${pkgname}/releases/download/v${_pkgver}/${pkgname#libtom}-${_pkgver}.tar.xz"{,.asc})
+sha256sums=('943af136e6c624371659dc6c98a2d749ea45912628717b72e4f8894339709b20'
+            'SKIP')
+validpgpkeys=('C4386A237ED43A475541B9427B2CD0DD4BCFF59B') # Steffen Jaeckel <s_jaeckel@gmx.de>
 
 build() {
   cd "${pkgname}-${_pkgver}"