| /system/update_engine/payload_generator/ |
| D | payload_generation_config_android.cc | 48 part->verity.hash_tree_algorithm = in AvbDescriptorCallback()
54 part->verity.hash_tree_salt.assign(salt, salt + hashtree.salt_len); in AvbDescriptorCallback()
58 part->verity.hash_tree_data_extent = in AvbDescriptorCallback()
63 part->verity.hash_tree_extent = ExtentForBytes( in AvbDescriptorCallback()
66 part->verity.fec_data_extent = in AvbDescriptorCallback()
68 part->verity.fec_extent = ExtentForBytes( in AvbDescriptorCallback()
70 part->verity.fec_roots = hashtree.fec_num_roots; in AvbDescriptorCallback()
78 if (part.verity.hash_tree_extent.num_blocks() != 0) { in VerifyVerityConfig()
80 HashTreeBuilder::HashFunction(part.verity.hash_tree_algorithm); in VerifyVerityConfig()
84 part.verity.hash_tree_data_extent.num_blocks() * block_size; in VerifyVerityConfig()
[all …]
|
| D | payload_generation_config_android_unittest.cc | 151 const VerityConfig& verity = image_config_.partitions[0].verity; in TEST_F() local
152 EXPECT_FALSE(verity.IsEmpty()); in TEST_F()
153 EXPECT_EQ(ExtentForRange(0, 2), verity.hash_tree_data_extent); in TEST_F()
154 EXPECT_EQ(ExtentForRange(2, 1), verity.hash_tree_extent); in TEST_F()
155 EXPECT_EQ("sha1", verity.hash_tree_algorithm); in TEST_F()
157 EXPECT_EQ(salt, verity.hash_tree_salt); in TEST_F()
158 EXPECT_EQ(ExtentForRange(0, 3), verity.fec_data_extent); in TEST_F()
159 EXPECT_EQ(ExtentForRange(3, 2), verity.fec_extent); in TEST_F()
160 EXPECT_EQ(2u, verity.fec_roots); in TEST_F()
187 EXPECT_TRUE(image_config_.partitions[0].verity.IsEmpty()); in TEST_F()
[all …]
|
| D | payload_file.cc | 100 part.verity = new_conf.verity; in AddPartition()
152 if (!part.verity.IsEmpty()) { in WritePayload()
153 if (part.verity.hash_tree_extent.num_blocks() != 0) { in WritePayload()
155 part.verity.hash_tree_data_extent; in WritePayload()
156 *partition->mutable_hash_tree_extent() = part.verity.hash_tree_extent; in WritePayload()
157 partition->set_hash_tree_algorithm(part.verity.hash_tree_algorithm); in WritePayload()
158 if (!part.verity.hash_tree_salt.empty()) in WritePayload()
159 partition->set_hash_tree_salt(part.verity.hash_tree_salt.data(), in WritePayload()
160 part.verity.hash_tree_salt.size()); in WritePayload()
162 if (part.verity.fec_extent.num_blocks() != 0) { in WritePayload()
[all …]
|
| D | payload_file.h | 98 VerityConfig verity; member
|
| D | payload_generation_config.h | 118 VerityConfig verity; member
|
| D | payload_generation_config.cc | 286 TEST_AND_RETURN_FALSE(part.verity.IsEmpty()); in Validate()
307 TEST_AND_RETURN_FALSE(part.verity.IsEmpty()); in Validate()
|
| D | delta_diff_utils.cc | 382 !new_part.verity.IsEmpty()) { in DeltaReadPartition()
384 << ExtentsToString({new_part.verity.hash_tree_extent}); in DeltaReadPartition()
385 new_visited_blocks.AddExtent(new_part.verity.hash_tree_extent); in DeltaReadPartition()
387 << ExtentsToString({new_part.verity.fec_extent}); in DeltaReadPartition()
388 new_visited_blocks.AddExtent(new_part.verity.fec_extent); in DeltaReadPartition()
|
| D | delta_diff_utils_unittest.cc | 173 new_part_.verity.hash_tree_extent = ExtentForRange(20, 30); in TEST_F()
174 new_part_.verity.fec_extent = ExtentForRange(40, 50); in TEST_F()
191 extent, new_part_.verity.hash_tree_extent)); in TEST_F()
193 ExtentRanges::ExtentsOverlap(extent, new_part_.verity.fec_extent)); in TEST_F()
|
| /system/extras/verity/ |
| D | verity_verifier.cpp | 107 fec_verity_metadata verity; in main() local
108 if (!input.get_verity_metadata(verity)) { in main()
113 int ret = verify_table(argv[3], verity.signature, sizeof(verity.signature), in main()
114 verity.table, verity.table_length); in main()
|
| D | BootSignature.mf | 1 Main-Class: com.android.verity.BootSignature
|
| D | VeritySigner.mf | 1 Main-Class: com.android.verity.VeritySigner
|
| D | VeritySigner.java | 17 package com.android.verity;
|
| /system/extras/libfec/ |
| D | fec_open.cpp | 312 f->verity.hash_start); in load_verity()
322 f->verity.hash_start); in load_verity()
336 f->verity.hash_start); in load_verity()
403 memset(&f->verity, 0, sizeof(f->verity)); in reset_handle()
419 if (f->verity.hash) { in fec_close()
420 delete[] f->verity.hash; in fec_close()
422 if (f->verity.salt) { in fec_close()
423 delete[] f->verity.salt; in fec_close()
425 if (f->verity.table) { in fec_close()
426 delete[] f->verity.table; in fec_close()
[all …]
|
| D | fec_read.cpp | 82 return !verity_check_block(f, &f->verity.hash[n * SHA256_DIGEST_LENGTH], in is_erasure()
89 verity_info *v = &f->verity; in is_zero()
122 check(!use_erasures || f->verity.hash); in __ecc_read()
183 } else if (!f->verity.hash) { in __ecc_read()
292 check(f->verity.hash); in verity_read()
309 uint64_t max_hash_block = (f->verity.hash_data_blocks * FEC_BLOCKSIZE - in verity_read()
315 uint8_t *hash = &f->verity.hash[curr * SHA256_DIGEST_LENGTH]; in verity_read()
532 if (f->verity.hash) { in fec_pread()
|
| D | fec_verity.cpp | 127 check(f->verity.salt); in verity_hash()
128 SHA256_Update(&ctx, f->verity.salt, f->verity.salt_size); in verity_hash()
193 verity_info *v = &f->verity; in verify_tree()
254 new (std::nothrow) uint8_t[f->verity.hash_data_blocks * FEC_BLOCKSIZE]); in verify_tree()
335 verity_info *v = &f->verity; in parse_table()
493 verity_info *v = &f->verity; in rewrite_metadata()
557 verity_info *v = &f->verity; in verity_parse_header()
646 verity_info *v = &f->verity; in fec_verity_set_status()
|
| D | fec_private.h | 109 verity_info verity; member
|
| /system/core/rootdir/ |
| D | fsverity_init.sh | 19 echo 1 > /proc/sys/fs/verity/require_signatures
23 /system/bin/mini-keyctl padd asymmetric fsv_product .fs-verity < "$cert" ||
28 /system/bin/mini-keyctl restrict_keyring .fs-verity ||
|
| /system/core/fs_mgr/ |
| D | fs_mgr_verity.cpp | 147 static int verify_verity_signature(const struct fec_verity_metadata& verity) in verify_verity_signature() argument
149 if (verify_table(verity.signature, sizeof(verity.signature), in verify_verity_signature()
150 verity.table, verity.table_length) == 0 || in verify_verity_signature()
151 verify_table(verity.ecc_signature, sizeof(verity.ecc_signature), in verify_verity_signature()
152 verity.table, verity.table_length) == 0) { in verify_verity_signature()
549 struct fec_verity_metadata verity; in compare_last_signature() local
562 if (fec_verity_get_metadata(f, &verity) == -1) { in compare_last_signature()
567 SHA256(verity.signature, sizeof(verity.signature), curr); in compare_last_signature()
722 struct fec_verity_metadata verity; in fs_mgr_setup_verity() local
737 if (fec_verity_get_metadata(f, &verity) < 0) { in fs_mgr_setup_verity()
[all …]
|
| D | README.overlayfs.md | 22 will be performed in the **adb disable-verity** and **adb remount**
33 $ adb disable-verity
53 $ adb disable-verity
103 - *adb enable-verity* will free up overlayfs and as a bonus the
116 If this happens, either fastboot flashall or adb enable-verity can
|
| /system/extras/boottime_tools/io_analysis/ |
| D | check_verity.py | 109 io, verity, total, blocks = get_average_and_std_dev(l)
111 verity[0], verity[1], verity[2], "total:", total[0], total[1], total[2]
112 return io, verity, total, blocks
116 io, verity, total, blocks = self.dump_list ("total,", self.reads)
118 verity_latency_per_1024KB = verity[2] / blocks * (1024 / 4)
|
| /system/connectivity/wifilogd/ |
| D | runtests.sh | 40 adb disable-verity
|
| /system/connectivity/wificond/ |
| D | runtests.sh | 41 adb disable-verity
|
| /system/sepolicy/prebuilts/api/29.0/private/ |
| D | fsverity_init.te | 19 # Allow init to write to /proc/sys/fs/verity/require_signatures
|
| /system/sepolicy/private/ |
| D | fsverity_init.te | 19 # Allow init to write to /proc/sys/fs/verity/require_signatures
|
| /system/core/fs_mgr/tests/ |
| D | adb-remount-test.sh | 671 adb enable-verity >/dev/null 2>/dev/null &&
776 H=`adb disable-verity 2>&1`
810 H=`adb disable-verity 2>&1`
1162 D=`adb disable-verity 2>&1`
|