Verifying that a Nitrokey has not been compromised

Nitrokeys Misc
6

Assuming we would ship the devices in a welded zipper. An attacker would need to have the knowledge and capabilities to 1) develop a malicious firmware, 2) intercept the shipment (this may be the hardest part) and 3) open and close the plastic casing without traces (to program his malicious firmware). Do you think that a welded zipper which can be bought by anybody for a few cents would stop such attacker? I don’t think so. Quite the opposite: A welded zipper would be snake oil which give you a false feeling of security. A sealed packaging which provides real security is quite hard. However, we do consider using seals in the future but didn’t find a good solution yet.