Ro.boot.vbmeta.digest Today

Modern Android devices rely on a chain of trust. At the heart of AVB 2.0 is the vbmeta partition, which contains hashes and signatures for other partitions (boot, system, vendor). During boot, the bootloader computes the digest of the vbmeta image and passes it to the kernel via the device tree. The Android system then exposes this value as the read-only property ro.boot.vbmeta.digest .

$ getprop ro.boot.vbmeta.digest a1b2c3d4e5f678901234567890abcdef1234567890abcdef1234567890abcdef ro.boot.vbmeta.digest

, where the value is checked against a transparency log to prove the OS has not been tampered with. Device Attestation Modern Android devices rely on a chain of trust

$ adb shell getprop ro.boot.vbmeta.digest ffffffffffffffff... # Different! vendor). During boot