diff --git a/kcm_sddm.changes b/kcm_sddm.changes
index 924400b..da00a36 100644
--- a/kcm_sddm.changes
+++ b/kcm_sddm.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Sat Sep 15 16:25:26 UTC 2018 - fabian@ritter-vogt.de
+
+- Add tarball signature and keyring containing keys of release managers
+  Jonathan Riddell and Bhushan Shah
+
 -------------------------------------------------------------------
 Thu Sep 13 17:24:59 UTC 2018 - fabian@ritter-vogt.de
 
diff --git a/kcm_sddm.spec b/kcm_sddm.spec
index b50e6cb..0961933 100644
--- a/kcm_sddm.spec
+++ b/kcm_sddm.spec
@@ -25,6 +25,10 @@ License:        GPL-2.0-only
 Group:          System/GUI/KDE
 Url:            https://projects.kde.org/projects/kdereview/sddm-kcm/repository
 Source:         http://download.kde.org/unstable/plasma/%{version}/sddm-kcm-%{version}.tar.xz
+%if %{with lang}
+Source1:        http://download.kde.org/unstable/plasma/%{version}/sddm-kcm-%{version}.tar.xz.sig
+Source2:        plasma.keyring
+%endif
 # PATCH-FIX-OPENSUSE
 Patch1:         dont-set-empty-autologin.patch
 # PATCH-FIX-OPENSUSE
diff --git a/plasma.keyring b/plasma.keyring
new file mode 100644
index 0000000..5e9faf8
Binary files /dev/null and b/plasma.keyring differ
diff --git a/sddm-kcm-5.13.90.tar.xz.sig b/sddm-kcm-5.13.90.tar.xz.sig
new file mode 100644
index 0000000..d2bd41d
--- /dev/null
+++ b/sddm-kcm-5.13.90.tar.xz.sig
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEELR1bBYg1d4fenuIl7JTRj38FmX4FAluamTgACgkQ7JTRj38F
+mX5SIgf+L4WeqJcIZUSHIIHmYPv+FZKcpXngrTOTQ64iLqNrlg1gqcyYOnaxL0+2
+CU7H08utPbqzlzTcdGJCqBx2oP46Hi1Q9KFwiUzvdPoLVMsD+towbLj63GaLLrSE
+ua0dWIN8KnW8EkKijz/7DSo0xffa74PAHPwzCYYx+BPeNPuzSj2fElDhhGHWoQfk
+cOJ1Xxlef/+qQ8jASNJPfOIpPlpSytoY8NED3+e4cixXoq5JgzTM6kOuJ5H3nESQ
+hdb5yrCInAjC6lW4paFLVf9Ly8leiyT5KPTeItuEYc2dq3kLo46D6nX68tKSr05t
+Szl/78hAwg7VeVZyu8cg+09f6DuDgw==
+=uivd
+-----END PGP SIGNATURE-----