Related Work

Several studies on web of trust model
Dugsongs 'gzsig' tool
Marius' PGPwrap library
GPGme library
both can be used to build 'extract' like tools

BSD ports tree
distributed set of MD5, SHA-1, and RMD160 hashes
what actually caught most of the trojans in 2002