app-crypt/
bsign

embed secure hashes (SHA1) and digital signatures (GNU Privacy Guard) into files

https://packages.debian.org/jessie/bsign

The dependencies are regularly computed based on the qa-reports.