Messages in this thread | | | Date | Tue, 19 May 2015 18:53:55 +0300 | From | Petko Manolov <> | Subject | Re: Should we automatically generate a module signing key at all? |
| |
On 15-05-19 11:37:49, Mimi Zohar wrote: > On Tue, 2015-05-19 at 07:36 -0700, Andy Lutomirski wrote: > > > > What integrity stuff? IIRC dm-verity doesn't use asymmetric crypto at > > all. IMA probably does, though. > > IMA can appraise file integrity based on either hashes or signatures. > The difference being that In addition to file integrity, signatures > provides file provenance. Going forward we'd like to see software come > with the associated file signatures.
I second this one. There's plenty of situations where integrity isn't enough and authenticity is needed.
cheers, Petko
| |