hash tree

OPPO Kernel Craftsman

Sep 10, 2021 · Information Security

Understanding dm-verity: Design Principles, Application Layer, and Kernel Implementation

dm‑verity is a Linux device‑mapper target that protects a data partition’s integrity by using a compile‑time hash‑tree stored on a separate hash device, with Android employing it for verified boot; user‑space creates the dm device, loads the verity table, activates it, while the kernel’s dev_create, table_load, and suspend handlers set up mapped_device structures and enforce per‑block hash verification during I/O.