android_packages_modules_Vi.../authfs/testdata/README.md

fs-verity signing
=================
With a key pair, fs-verity signature can be generated by simply running
`fsverity` command line tool from
[fsverity-util](https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/fsverity-utils.git).

```
fsverity sign test.data test.data.fsv_sig --key=key.pem --cert=cert.pem
```
authfs: create a chunked reader with fs-verity verification The new chunked reader uses a Merkle tree to verify each chunk read of the corresponding backing file. The reader also accepts an autheneticator for signature verification, though it is currently a fake implementation due to the lack of PKCS#7 signature support in BoringSSL (b/170494765). Test: atest authfs_host_test_src_lib Bug: 171310075 Change-Id: Ibf4151ab2a93f7515ad8c9c0462df6c21c10d767 2020-11-13 22:30:05 +00:00			`fs-verity signing`
			`=================`
			`With a key pair, fs-verity signature can be generated by simply running`
			`fsverity` command line tool from
			`[fsverity-util](https://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/fsverity-utils.git).`

			```
			`fsverity sign test.data test.data.fsv_sig --key=key.pem --cert=cert.pem`
			```