Implement signing and verifying packages