On 11/05/2015 03:02 AM, Sami Tolvanen wrote: > This patch set adds error correction support to dm-verity, which > makes it possible to recover from data corruption in exchange of > increased space overhead. > > The feature is implemented as part of dm-verity to take advantage > of the existing hash tree to improve performance and locate known > erasures. Hi, could you please elaborate why is all this needed? To extend support of some faulty flash chips? Do you have some statistics that there are really such correctable errors in real devices? Anyway, I really do not understand layer separation here. Either we have cryptographically strong data integrity checking or we have error-correction. Are we sure this combination does not create some unintended gap in integrity checking? Why the integrity check should even try to do some error correction if there is an intentional integrity attack? IMO if you need an error correction, this should be placed as a separate layer below the crypto integrity check, the same as RAID operates. The second question - why are you writing another separate tool for maintenance for dm-verity when there is veritysetup? Milan -- dm-devel mailing list dm-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/dm-devel
