I found it extremely difficult to set up deb file signing and signature verification using debsigs and debsig-verify. There is an old HOWTO out there that is much-referenced, but does not work at least for contemporary versions of these tools.