diff --git a/dev-cpp/highway/Manifest b/dev-cpp/highway/Manifest
index d6470f59da0d..87f509d43851 100644
--- a/dev-cpp/highway/Manifest
+++ b/dev-cpp/highway/Manifest
@@ -1,3 +1,4 @@
 DIST highway-1.2.0.tar.gz 2234665 BLAKE2B b92f699c0f2f15fd9d223cf9546125b68a5c12ba9c84f8a3a990129f40bc56a266858e4f99eebe34e47c9904bd9164a138de1af8d405911d4b03bea67532489a SHA512 e94b9cc51c81157ccd6bf4d6163445b1acc1a2667dc2650d1c4aea0a5021989c08dafcb92564fcbecb9445ab2f1779051260be2f5b29c3932803b8a42ed2f824
 DIST highway-1.3.0.tar.gz 3634890 BLAKE2B c8db95b003c1d00e87b42f3d7bf06005873c225ef950f7cb32057f6f690f219a400dcf68220a0dbbb72cdb12f13afabcd9c1b8e9c7e5eb007734bfe4b617c347 SHA512 8b9f4fdc4fa60b6817417959853f5b55bf86aec9d35fc6664dda15179cc55e0a9940f3a46011a84b95263ba342dc47ca1cb93b04481ff4b63d724cce1815d7c6
-DIST highway-1.4.0.tar.gz 3691240 BLAKE2B 25282ceb02f1bb50e188e01f1b1daf0622d93f03325d71a3da822c91525790f894f2c02e8418127899e72956981a2cbb0ae801b497799ec52a8a37a114d6213f SHA512 819422857d6a74e3a936c402698e078db5b7b88fb43767e62429ec7bd954fe93b017e75029a4df4a1a97ef3a2486107eef5247da751eb487640dea409f3f2fa2
+DIST highway-1.4.0.tgz 3691557 BLAKE2B 54508ce397d10e719e7c90b9a5421b4fa0263b260f27e266bf43d3213724d7bb7dfa81a4e6df88f8a012d2e851d67e7f70c27851c38b78ac98f380e35aea7e5e SHA512 f3859e5ec2afde7798407a7eef46a48418e4b3b26dc48d5802930aaba040bd627403d0c0e8bae7d43cdd29b3bd5a9abcc2f0c528067eae444195aea46f6669a9
+DIST highway-1.4.0.tgz.asc 228 BLAKE2B 35c691dfe64de52159f1fe3a8e1e066f22d6fb736b48387d821c3b033787c3ad0afce41e31608f09602d7896e060176070598731d1b1afa31ce1e44d2827c131 SHA512 1841c9b62578eeaa7cc4ec8cec2b72a3af0315ab49c8dfb3fa69585b59e0207707957ac374ff3f23e0e8ffbbf9101f359b9ff787cba7b27a0abba220b5a09002
diff --git a/dev-cpp/highway/highway-1.4.0.ebuild b/dev-cpp/highway/highway-1.4.0.ebuild
index d298f9b09c82..e26cb7d0d0ae 100644
--- a/dev-cpp/highway/highway-1.4.0.ebuild
+++ b/dev-cpp/highway/highway-1.4.0.ebuild
@@ -12,8 +12,17 @@ if [[ "${PV}" == *9999* ]]; then
 	inherit git-r3
 	EGIT_REPO_URI="https://github.com/google/highway.git"
 else
-	SRC_URI="https://github.com/google/highway/archive/refs/tags/${PV}.tar.gz -> ${P}.tar.gz"
+	VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/janwassenberg.asc
+	inherit verify-sig
+
+	# XXX: Drop rename after 1.4.0
+	SRC_URI="
+		https://github.com/google/highway/releases/download/${PV}/${P}.tar.gz -> ${P}.tgz
+		verify-sig? ( https://github.com/google/highway/releases/download/${PV}/${P}.tar.gz.asc -> ${P}.tgz.asc )
+	"
 	KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+
+	BDEPEND="verify-sig? ( sec-keys/openpgp-keys-janwassenberg )"
 fi
 
 LICENSE="|| ( Apache-2.0 BSD ) CC0-1.0"
@@ -21,7 +30,7 @@ SLOT="0"
 IUSE="cpu_flags_arm_neon test"
 
 DEPEND="test? ( dev-cpp/gtest[${MULTILIB_USEDEP}] )"
-BDEPEND="|| ( >=sys-devel/binutils-2.44:* llvm-core/lld sys-devel/native-cctools )"
+BDEPEND+=" || ( >=sys-devel/binutils-2.44:* llvm-core/lld sys-devel/native-cctools )"
 
 RESTRICT="!test? ( test )"
 
diff --git a/dev-cpp/highway/highway-9999.ebuild b/dev-cpp/highway/highway-9999.ebuild
index 089da1882f61..e26cb7d0d0ae 100644
--- a/dev-cpp/highway/highway-9999.ebuild
+++ b/dev-cpp/highway/highway-9999.ebuild
@@ -1,4 +1,4 @@
-# Copyright 2021-2025 Gentoo Authors
+# Copyright 2021-2026 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 EAPI=8
@@ -12,16 +12,25 @@ if [[ "${PV}" == *9999* ]]; then
 	inherit git-r3
 	EGIT_REPO_URI="https://github.com/google/highway.git"
 else
-	SRC_URI="https://github.com/google/highway/archive/refs/tags/${PV}.tar.gz -> ${P}.tar.gz"
+	VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/janwassenberg.asc
+	inherit verify-sig
+
+	# XXX: Drop rename after 1.4.0
+	SRC_URI="
+		https://github.com/google/highway/releases/download/${PV}/${P}.tar.gz -> ${P}.tgz
+		verify-sig? ( https://github.com/google/highway/releases/download/${PV}/${P}.tar.gz.asc -> ${P}.tgz.asc )
+	"
 	KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~ppc ~ppc64 ~riscv ~sparc ~x86"
+
+	BDEPEND="verify-sig? ( sec-keys/openpgp-keys-janwassenberg )"
 fi
 
-LICENSE="Apache-2.0"
+LICENSE="|| ( Apache-2.0 BSD ) CC0-1.0"
 SLOT="0"
 IUSE="cpu_flags_arm_neon test"
 
 DEPEND="test? ( dev-cpp/gtest[${MULTILIB_USEDEP}] )"
-BDEPEND="|| ( >=sys-devel/binutils-2.44:* llvm-core/lld sys-devel/native-cctools )"
+BDEPEND+=" || ( >=sys-devel/binutils-2.44:* llvm-core/lld sys-devel/native-cctools )"
 
 RESTRICT="!test? ( test )"