You can still use an airgapped hw device to do the checksum