These aren't signatures though? They're checksums, anyone could make them for any blob they want.