diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..8dd060f
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/minisign-0.8.tar.gz
diff --git a/minisign.spec b/minisign.spec
new file mode 100644
index 0000000..f49f0fa
--- /dev/null
+++ b/minisign.spec
@@ -0,0 +1,37 @@
+Name:           minisign
+Version:        0.8
+Release:        2%{?dist}
+Summary:        A dead simple tool to sign files and verify digital signatures
+License:        ISC
+URL:            https://github.com/jedisct1/minisign
+Source0:        %{url}/archive/%{version}/%{name}-%{version}.tar.gz
+
+BuildRequires:  libsodium-devel
+BuildRequires:  cmake
+BuildRequires:  gcc
+
+%description
+Minisign is a dead simple tool to sign files and verify signatures.
+
+%prep
+%autosetup
+
+%build
+%cmake .
+%make_build
+
+%install
+%make_install
+
+%files
+%{_bindir}/%{name}
+%{_mandir}/man1/%{name}.1*
+%license LICENSE
+%doc README.md
+
+%changelog
+* Wed Jul 17 2019 François Kooman <fkooman@tuxed.net> - 0.8-2
+- use macros for Source0
+
+* Wed Jul 17 2019 François Kooman <fkooman@tuxed.net> - 0.8-1
+- initial package
diff --git a/sources b/sources
new file mode 100644
index 0000000..5bcfbae
--- /dev/null
+++ b/sources
@@ -0,0 +1 @@
+SHA512 (minisign-0.8.tar.gz) = 79bf626d0c15e39ce3bdf53600038028c0b22904b648074bf516a9ea6962c9486c41244e80637a5fbac090cce1ed9b4b3d57b8a02632646e01b43aa413cd8bd9