update TODO

diff --git a/TODO b/TODO
index 7a734ef25d26f812e788aa6e1295be9bdcc70634..7ad7c77310811b89d1a44aa52dce7d994937c6a6 100644 (file)
--- a/TODO
+++ b/TODO
@@ -133,6 +133,10 @@ Deprecations and removals:
 
 Features:
 
+* repart + cryptsetup: support file systems that are encrypted and use verity
+  on top. Usecase: confexts that shall be signed by the admin but also be
+  confidential. Then, add a new --make-ddi=confext-encrypted for this.
+
 * systemd-pcrextend:
   - support measuring to nvindex with PCR update semantics ("fake PCRs")
   - add api for "allocating" such an nvindex