So I'm making a distributed recovery system which consists of a bunch of hidden usb sticks. I plan to have the file be an executable, probably in the form of a appimage, which will contain my encryption software and encrypted volume.
The only hole in this plan is if someone modified the file or swapped it out with malware, which would send the attacker any password I entered.
I'm basically wondering if there is a way to make the file self verify, so instead of using a checksum the executable has to prove some way that it wasn't modified.