Air-gapped Signing Mechanism