2 * dm-verity volume handling
4 * Copyright (C) 2012, Red Hat, Inc. All rights reserved.
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * version 2 as published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License
16 * along with this program; if not, write to the Free Software
17 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
26 #define VERITY_SIGNATURE "verity\0\0"
27 #define VERITY_MAX_LEVELS 63
28 #define VERITY_MAX_SALT_SIZE 384
31 struct crypt_params_verity;
33 /* FIXME: not yet final on-disk format! Add UUID etc */
37 uint8_t data_block_bits;
38 uint8_t hash_block_bits;
42 uint32_t data_blocks_hi;
43 uint32_t data_blocks_lo;
44 uint8_t algorithm[16];
45 uint8_t salt[VERITY_MAX_SALT_SIZE];
49 int VERITY_read_sb(struct crypt_device *cd,
52 struct crypt_params_verity *params);
54 int VERITY_write_sb(struct crypt_device *cd,
57 struct crypt_params_verity *params);
59 int VERITY_activate(struct crypt_device *cd,
61 const char *hash_device,
62 const char *root_hash,
63 size_t root_hash_size,
64 struct crypt_params_verity *verity_hdr,
67 int VERITY_verify(struct crypt_device *cd,
68 struct crypt_params_verity *verity_hdr,
69 const char *data_device,
70 const char *hash_device,
71 const char *root_hash,
72 size_t root_hash_size);
74 int VERITY_create(struct crypt_device *cd,
75 struct crypt_params_verity *verity_hdr,
76 const char *data_device,
77 const char *hash_device,
79 size_t root_hash_size);
81 uint64_t VERITY_hash_offset_block(struct crypt_params_verity *params);