Re: [f2fs-dev] [RFC PATCH 00/10] fs-verity: filesystem-level integrity protection

2018-08-31 Thread Eric Biggers
Hi Jan, On Fri, Aug 31, 2018 at 10:05:23PM +0200, Jan Lübbe wrote: > On Fri, 2018-08-24 at 09:16 -0700, Eric Biggers wrote: > [...] > > Since fs-verity provides the Merkle tree root hash in constant time and > > verifies data blocks on-demand, it is useful for efficiently verifying > > the authent

Re: [f2fs-dev] [RFC PATCH 00/10] fs-verity: filesystem-level integrity protection

2018-08-31 Thread Jan Lübbe
On Fri, 2018-08-24 at 09:16 -0700, Eric Biggers wrote: [...] > Since fs-verity provides the Merkle tree root hash in constant time and > verifies data blocks on-demand, it is useful for efficiently verifying > the authenticity of, or "appraising", large files of which only a small > portion may be

[f2fs-dev] [RFC PATCH 00/10] fs-verity: filesystem-level integrity protection

2018-08-24 Thread Eric Biggers
Hello, This RFC patchset implements fs-verity for ext4 and f2fs. fs-verity is similar to dm-verity, but implemented on a per-file basis: a Merkle tree hidden past the end of the file is used to verify the file's data as it is paged in. Most of the code is in fs/verity/, and not too many filesyst