iso file not have hashvalue to verify it’s integrity.
Digital signature verification is the intended way to verify integrity and authenticity at the same time. sha512sums files are also provided alongside the images (see https://www.whonix.org/download/ova/18.2.1.9/), but they aren’t advertised. They aren’t a secure way of verifying integrity on their own. See:
Note: Whonix is based on Kicksecure.
1 Like