diff --git a/.gitignore b/.gitignore
index f9182c4..2c39f36 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 /tpm2-pkcs11-1.*.tar.gz
+/tpm2-pkcs11-1.*.tar.gz.asc
diff --git a/gpgkey-8E1F50C1.gpg b/gpgkey-8E1F50C1.gpg
new file mode 100644
index 0000000..cc4cc09
Binary files /dev/null and b/gpgkey-8E1F50C1.gpg differ
diff --git a/sources b/sources
index bc7d223..c2f1070 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-SHA512 (tpm2-pkcs11-1.0.tar.gz) = 00faca257bf8a04d43e3992c5d45cbdde0324381f7bc3cdcffefdb24a23533552aa0f38795dd7bfac92ee9d92e0fa95f43e27159a3c65d18736a6526fbb9dcf3
+SHA512 (tpm2-pkcs11-1.0.1.tar.gz) = 24242f44680d5d3b152d21fcda20e874669cee3a03524daccb41c5f72499858e3bd932bf470b356727089b80c3fc8ed9b4b3a34d8657d4ec8eaac7a063e2394f
+SHA512 (tpm2-pkcs11-1.0.1.tar.gz.asc) = 6e86dbddfce4086592476a7e60e54707f1323d50fc58102fcc6e001964e5a9d0c5c5ba9b42630f855e500588bd93e216b94ae3098248404923fbb098dd6811ce
diff --git a/tpm2-pkcs11.spec b/tpm2-pkcs11.spec
index 8238e99..3b8ad2c 100644
--- a/tpm2-pkcs11.spec
+++ b/tpm2-pkcs11.spec
@@ -1,13 +1,16 @@
 #global candidate RC1
 
 Name:		tpm2-pkcs11
-Version:	1.0
+Version:	1.0.1
 Release:	1%{?candidate:.%{candidate}}%{?dist}
 Summary:	PKCS#11 interface for TPM 2.0 hardware
 
 License:	BSD
 URL:		https://github.com/tpm2-software/tpm2-pkcs11
-Source0:	https://github.com/tpm2-software/tpm2-pkcs11/releases/download/%{version}%{?candidate:-%{candidate}}/%{name}-%{version}%{?candidate:-%{candidate}}.tar.gz
+Source0:	https://github.com/tpm2-software/%{name}/releases/download/%{version}%{?candidate:-%{candidate}}/%{name}-%{version}%{?candidate:-%{candidate}}.tar.gz
+Source1:	https://github.com/tpm2-software/%{name}/releases/download/%{version}%{?candidate:-%{candidate}}/%{name}-%{version}%{?candidate:-%{candidate}}.tar.gz.asc
+# William Roberts (Bill Roberts) key from pgp.mit.edu
+Source2:	gpgkey-8E1F50C1.gpg
 
 BuildRequires:	gcc
 BuildRequires:	make
@@ -27,6 +30,8 @@ BuildRequires:	python3-devel
 BuildRequires:	python3-pyasn1-modules
 BuildRequires:	python3-pyyaml
 BuildRequires:	python3-cryptography
+# for tarball signature verification
+BuildRequires:	gnupg2
 
 %description
 PKCS #11 is a Public-Key Cryptography Standard that defines a standard method
@@ -44,6 +49,7 @@ Requires:	python3-cryptography
 The tools required to setup and configure TPM2 for PKCS#11.
 
 %prep
+gpgv2 --quiet --keyring %{SOURCE2} %{SOURCE1} %{SOURCE0}
 %setup -q -n %{name}-%{version}%{?candidate:-%{candidate}}
 
 
@@ -87,6 +93,9 @@ cd tools
 
 
 %changelog
+* Tue Jan 07 2020 Jakub Jelen <jjelen@redhat.com> - 1.0.1-1
+- New upstream release (#1784580)
+
 * Tue Dec 31 2019 Peter Robinson <pbrobinson@fedoraproject.org> 1.0-1
 - Update to 1.0 stable release