dm-integrity
dm-integrity is a Linux device-mapper target that stores per-block integrity tags and can generate and verify them when configured with an internal hash.
An upper layer supplying the tags is responsible for checking them; an internal CRC or HMAC has a different threat model. [1]
Relations
- related
- checksum, dm-verity, fs-verity, crash-consistency
Limitations
- Journaled mode couples data and tag updates; direct mode can leave mismatches after a crash. This is not application-level transaction atomicity. [1]