diff --git a/kscreenlocker-5.13.90.tar.xz.sig b/kscreenlocker-5.13.90.tar.xz.sig
new file mode 100644
index 0000000..7cc930a
--- /dev/null
+++ b/kscreenlocker-5.13.90.tar.xz.sig
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAlualT4ACgkQ7JTRj38F
+mX5yiAf9HTlo76i0z0XblIgDCNrBY16bsYh421PHx64klJ4QjybFZ4EUNA0CMBkO
+cLOR/jVkGgH+/fKOUOrI2QyIhXJQsu7ga2dBiEiAznGEXQaVsAbhaNFXV79a9k9Y
+NjnMG8VFpkdgZQ7VHKM4aYTB9tTPWOagEeVV6oPxTzDDSxloyhg+bQzOYsSolaYS
+B+pMoQnd9NFzlUt7tNJRniJM1Pj5Wf1HkYwZXjlE5GSl8+zTKtJY/1ANdVmCy1jA
+Byq6J4Cp1ikqiQIJc2zW3e9R0xdmuv6pmczZnaVBauv/vBGfETRlpMZpdlgD7ini
+IyDuBCobpgDRm2rQLj0L3ZkHvJitmg==
+=NKJA
+-----END PGP SIGNATURE-----
diff --git a/kscreenlocker.changes b/kscreenlocker.changes
index 2490ca5..b9efcbb 100644
--- a/kscreenlocker.changes
+++ b/kscreenlocker.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:28 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Thu Sep 13 17:25:00 UTC 2018 - fabian@ritter-vogt.de
 
diff --git a/kscreenlocker.spec b/kscreenlocker.spec
index 2fbcc17..ccf4913 100644
--- a/kscreenlocker.spec
+++ b/kscreenlocker.spec
@@ -25,6 +25,10 @@ License:        GPL-2.0-or-later
 Group:          System/GUI/KDE
 Url:            https://projects.kde.org/kscreenlocker
 Source:         http://download.kde.org/unstable/plasma/%{version}/kscreenlocker-%{version}.tar.xz
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/kscreenlocker-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
 # PATCH-FIX-OPENSUSE fix-wayland-version-requirement.diff -- Changes wayland requirement from 1.3 to 1.2.1
 Patch0:         fix-wayland-version-requirement.diff
 BuildRequires:  cmake >= 2.8.12
diff --git a/plasma.keyring b/plasma.keyring
new file mode 100644
index 0000000..5e9faf8
Binary files /dev/null and b/plasma.keyring differ