On 15-05-19 11:37:49, Mimi Zohar wrote: > On Tue, 2015-05-19 at 07:36 -0700, Andy Lutomirski wrote: > > > > What integrity stuff? IIRC dm-verity doesn't use asymmetric crypto at > > all. IMA probably does, though. > > IMA can appraise file integrity based on either hashes or signatures. > The difference being that In addition to file integrity, signatures > provides file provenance. Going forward we'd like to see software come > with the associated file signatures.
I second this one. There's plenty of situations where integrity isn't enough and authenticity is needed. cheers, Petko -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [email protected] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
