swdb.lst is a signed file with the checksums of all software packages required
to build gnupg 2.1. Verification is done by a script and thus we should add and
use SHA-256 checksums.
The major work is to automate the creation of the checksums by all packages so
that the error prone c+p approach after a "make distcheck" is avoided.