I was recently recommended a specific smartcard over on HardwareRecs.SE. As part of this, the answerer (our ursine overlord) stated that the cards in question don't offer a means to securely backup keys but however accept plaintext keys to be imported. It was suggested to run my own key ceremony to generate those keys.
Now for the preparation of this I had to ask myself:
Is there any way to ensure / verify that I actually burnt the correct and intended ISO onto the disc I'll use for the ceremony?
The threat model: I'd like to minimize trust in every single hardware and software component which came in-touch with this ISO and get an as strong as possible assertion that the ISO is indeed valid and the disc content equals the ISO.
Possible attack vectors include, but are not limited to:
- A malicious browser (used to retrieve the ISO)
- A malicious software on the OS (used to store the ISO until download is completed and burn process is initiated)
- A malicious burning software (which will report fake hashes to me or make malicious changes)
- A malicious hardware drive (used to store the ISO until it's burnt)
- A malicious DVD burner