tree fedd2958d8b46d6f58a579060cd52283d8e692fe
parent 0c0bd34a142963ca3454f530e47ce1c230d8cc9d
author Dmitry Kasatkin <d.kasatkin@samsung.com> 1394009381 +0200
committer Dmitry Kasatkin <d.kasatkin@samsung.com> 1394009699 +0200

dm-integrity: integrity protection device-mapper target

Device-mapper "integrity" target provides transparent cryptographic integrity
protection of the underlying read-write block device using hash-based message
authentication codes (HMACs). HMACs can be stored on the same or different
block device.

dm-integrity uses an encrypted key type, stored on the kernel keyring, to
obtain a secret key for use in cryptographic operations. Encrypted keys are
never exposed in plain text to user space. The encrypted keys are encrypted
using master key, which can either be a user defined or trusted key type.
The secret key, which is usually device specific, binds integrity data to the
device. As a result data blocks and corresponding HMACs cannot simply be
copied over from other file systems.

Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>