Generate and validate per-operation hashes As part of securing the HTTP-based updates, we want to add a SHA256 hash of the data blob for each operation so that they can't be tampered with by a man in the middle. This CL adds support for generating and including such hashes for each operation in the payload as well as validating them in update_engine, if present. BUG=chromium-os:34298 TEST=Tested on ZGB to make sure existing functionality works fine. Existing unit tests cover all the new code paths. Change-Id: Ie42ed1930a66ceaf183f36ce3af0dea719e44237 Reviewed-on: https://gerrit.chromium.org/gerrit/33389 Reviewed-by: Don Garrett <dgarrett@chromium.org> Commit-Ready: Jay Srinivasan <jaysri@chromium.org> Tested-by: Jay Srinivasan <jaysri@chromium.org>
4 files changed
