android_packages_modules_Vi.../authfs/testdata
Victor Hsieh f77c5729a6 authfs: create a chunked reader with fs-verity verification
The new chunked reader uses a Merkle tree to verify each chunk read of
the corresponding backing file. The reader also accepts an
autheneticator for signature verification, though it is currently a fake
implementation due to the lack of PKCS#7 signature support in BoringSSL
(b/170494765).

Test: atest authfs_host_test_src_lib
Bug: 171310075

Change-Id: Ibf4151ab2a93f7515ad8c9c0462df6c21c10d767
2020-11-18 16:00:43 -08:00
..
README.md authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
cert.der authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
cert.pem authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
input.4k authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4k.fsv_sig authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
input.4k.merkle_dump authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4k1 authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4k1.fsv_sig authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
input.4k1.merkle_dump authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4m authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4m.fsv_sig authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00
input.4m.merkle_dump authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
input.4m.merkle_dump.bad authfs: implement fs-verity Merkle tree verification 2020-11-16 17:09:57 -08:00
key.pem authfs: create a chunked reader with fs-verity verification 2020-11-18 16:00:43 -08:00

README.md

fs-verity signing

With a key pair, fs-verity signature can be generated by simply running fsverity command line tool from fsverity-util.

fsverity sign test.data test.data.fsv_sig --key=key.pem --cert=cert.pem