Signature verification using blockchain

1. A method comprising:

initiating, by a processing device, one or more transactions in a blockchain system, wherein the one or more transactions comprise a first indication of a first signature fora first software package and a second indication of a second signature fora second software package, each of the first indication and the second indication to be stored in a blockchain, wherein the first signature comprises a first plurality of checksums that are each generated using at least part of the first software package and the second signature comprises a second plurality of checksums that are each generated using at least part of the second software package; and

distributing at least one of the first software package to a computing device with an indication of a location of the first signature in the blockchain or the second software package to the computing device with an indication of a location of the second signature in the blockchain.

2. The method of claim 1 , further comprising:

generating the first signature for the first software package; and

generating the first indication of the first signature.

3. The method of claim 1 , wherein initiating the one or more transactions comprises designating a first address to send a cryptocurrency, a second address to receive the cryptocurrency, and metadata comprising the first indication of the first signature.

4. The method of claim 1 , wherein initiating the one or more transactions comprises providing the first indication of the first signature as metadata in a provable prune-able transaction to the blockchain.

5. The method of claim 1 , further comprising initiating a second transaction in a second blockchain system, wherein the second transaction comprises the first indication of the first signature for the first software package and is to be stored in a second blockchain.

6. The method of claim 1 , further comprising:

generating the second signature for the second software package.

7. The method of claim 2 , further comprising distributing the first software package to a second computing device with the first indication of the location of the first signature in the blockchain.

8. A non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to:

initiate, by a processing device, one or more transactions in a blockchain system, wherein the one or more transactions comprise a first indication of a first signature fora first software package and a second indication of a second signature fora second software package, each of the first indication and the second indication to be stored in a blockchain, wherein the first signature comprises a first plurality of checksums that are each generated using at least part of the first software package and the second signature comprises a second plurality of checksums that are each generated using at least part of the second software package; and

distribute at least one of the first software package to a computing device with an indication of a location of the first signature in the blockchain or the second software package to the computing device with an indication of a location of the second signature in the blockchain.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the processing device further to:

generate the first signature for the first software package; and

generate the first indication of the first signature.

10. The non-transitory computer-readable storage medium of claim 8 , wherein to initiate the one or more transactions comprises designating addresses to send and receive a cryptocurrency.

11. The non-transitory computer-readable storage medium of claim 8 , wherein to initiate the one or more transactions the processing device is further to designate metadata comprising the respective indication of the respective signature.

12. The non-transitory computer-readable storage medium of claim 8 , wherein to initiate the one or more transactions the processing device is further to provide the respective indication of the respective signature as metadata in a provable prune-able transaction to the blockchain.

13. The non-transitory computer-readable storage medium of claim 8 , wherein the processing device is further to initiate a second transaction in a second blockchain system, wherein the second transaction comprises the first indication of the first signature for the first software package and is to be stored in a second blockchain.

14. The non-transitory computer-readable storage medium of claim 8 , wherein the processing device is further to:

generate the second signature for the second software package.

15. The non-transitory computer-readable storage medium of claim 8 , wherein the processing device is further to distribute the first software package to a second computing device with the first indication of the location of the first signature in the blockchain.

16. A system comprising:

a memory device; and

a processing device operatively coupled to the memory device, the processing device to:

initiate, by a processing device, one or more transactions in a blockchain system, wherein the one or more transactions comprise a first indication of a first signature fora first software package and a second indication of a second signature fora second software package, each of the first indication and the second indication to be stored in a blockchain, wherein the first signature comprises a first plurality of checksums that are each generated using at least part of the first software package and the second signature comprises a second plurality of checksums that are each generated using at least part of the second software package; and

distribute at least one of the first software package to a computing device with an indication of a location of the first signature in the blockchain or the second software package to the computing device with an indication of a location of the second signature in the blockchain.

17. The system of claim 16 , wherein the processing device is further to generate the first signature for the first software package.

18. The system of claim 16 , wherein to initiate the one or more transactions the processing device is further to designate a first address to send a cryptocurrency, a second address to receive the cryptocurrency, and metadata comprising the first indication of the first signature.

19. The system of claim 16 , wherein the processing device is further to initiate a second transaction in a second blockchain system, wherein the second transaction comprises the first indication of the first signature for the first software package and is to be stored in a second blockchain.

20. The system of claim 16 , wherein the processing device is further to:

receive the first software package and initiate an installation procedure;

identify the location of the first indication of the first signature for the first software package;

access the one or more transactions, wherein the one or more transactions comprise the first indication of the first signature; and

verify the first software package in view of the package signature.