diff --git a/.gitignore b/.gitignore
index 1e3e3b3..119a189 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /babeltrace-1.*.tar.bz2
+/babeltrace-1.5.7.tar.bz2.asc
diff --git a/babeltrace.spec b/babeltrace.spec
index 8efa7ff..eb1fed5 100644
--- a/babeltrace.spec
+++ b/babeltrace.spec
@@ -1,10 +1,13 @@
 Name:           babeltrace
 Version:        1.5.7
-Release:        1%{?dist}
+Release:        2%{?dist}
 Summary:        Trace Viewer and Converter, mainly for the Common Trace Format
 License:        MIT and GPLv2
 URL:            https://www.efficios.com/babeltrace
 Source0:        https://www.efficios.com/files/%{name}/%{name}-%{version}.tar.bz2
+Source1:        https://www.efficios.com/files/%{name}/%{name}-%{version}.tar.bz2.asc
+# gpg2 --export --export-options export-minimal 7F49314A26E0DE78427680E05F1B2A0789F12B11 > gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
+Source2:        gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
 
 BuildRequires:  bison >= 2.4
 BuildRequires:  flex >= 2.5.35
@@ -15,8 +18,8 @@ BuildRequires:  python3-devel
 BuildRequires:  swig >= 2.0
 BuildRequires:  elfutils-devel >= 0.154
 BuildRequires:  autoconf automake libtool
-# For check
-BuildRequires:  perl-Test-Harness
+BuildRequires:  gnupg2
+
 Requires:       lib%{name}%{?_isa} = %{version}-%{release}
 
 %description
@@ -58,6 +61,7 @@ to/from another trace format.
 
 
 %prep
+%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
 %setup -q
 
 %build
@@ -110,6 +114,9 @@ rm -f %{buildroot}/%{_pkgdocdir}/std-ext-lib.txt
 
 
 %changelog
+* Wed Jul 24 2019 Michael Jeanson <mjeanson@efficios.com> - 1.5.7-2
+- Add GPG source file verification
+
 * Wed Jul 24 2019 Michael Jeanson <mjeanson@efficios.com> - 1.5.7-1
 - New upstream release
 
diff --git a/gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg b/gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg
new file mode 100644
index 0000000..d020f1d
Binary files /dev/null and b/gpgkey-7F49314A26E0DE78427680E05F1B2A0789F12B11.gpg differ
diff --git a/sources b/sources
index 40db9ba..def08b6 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
+SHA512 (babeltrace-1.5.7.tar.bz2.asc) = dbe1ff19cda21a29d65c1b7af2f978de60b93d45884c5a290a2ef373e7aba044851aa943312088db89e4bab0a75b2201844aef619f57a593e761fbebbdcf62d3
 SHA512 (babeltrace-1.5.7.tar.bz2) = 1cab84b63fd0935574cca8d4c70302a917776e83e738e73aa3ce4070c6d3279556ab665285c932d1b2159115a58cade7cfa9b0416b4a2807e1ce11bb9c7ea8cb