Skip to content

Commit 0f89b61

Browse files
committed
Rename fixed notion of time
Rename from "fixed update expiration time" to "fixed update start time", because we are not actually modifying the expiration time. We are fixing the system time to the time the update was started. Signed-off-by: Joshua Lock <[email protected]>
1 parent 2457d2e commit 0f89b61

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

tuf-spec.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1092,8 +1092,8 @@ repo](https://github.com/theupdateframework/specification/issues).
10921092
process should not leave clients in an unrecoverable state.
10931093

10941094
**5.0**. **Record the time at which the update began** as the fixed update
1095-
expiration time. Time is fixed at the beginning of the update workflow to
1096-
allow an application using TUF to effectively pause time, in order to prevent
1095+
start time. Time is fixed at the beginning of the update workflow to allow
1096+
an application using TUF to effectively pause time, in order to prevent
10971097
metadata which is valid at the beginning of an update from expiring during
10981098
the update workflow.
10991099

@@ -1153,10 +1153,10 @@ repo](https://github.com/theupdateframework/specification/issues).
11531153
* **5.2.8**. **Repeat steps 5.2.1 to 5.2.8**.
11541154

11551155
* **5.2.9**. **Check for a freeze attack.** The expiration timestamp in the
1156-
trusted root metadata file MUST be higher than the fixed update expiration
1157-
time. If the trusted root metadata file has expired, abort the update
1158-
cycle, report the potential freeze attack. On the next update cycle, begin
1159-
at step 5.1 and version N of the root metadata file.
1156+
trusted root metadata file MUST be higher than the fixed update start time.
1157+
If the trusted root metadata file has expired, abort the update cycle,
1158+
report the potential freeze attack. On the next update cycle, begin at step
1159+
5.1 and version N of the root metadata file.
11601160

11611161
* **5.2.10**. **If the timestamp and / or snapshot keys have been rotated,
11621162
then delete the trusted timestamp and snapshot metadata files.** This is done
@@ -1197,8 +1197,8 @@ used to download the timestamp metadata file is of the fixed form FILENAME.EXT
11971197
timestamp metadata file, abort the update cycle, and report the failure.
11981198

11991199
* **5.3.3**. **Check for a freeze attack.** The expiration timestamp in the
1200-
new timestamp metadata file MUST be higher than the fixed update expiration
1201-
time. If so, the new timestamp metadata file becomes the trusted timestamp
1200+
new timestamp metadata file MUST be higher than the fixed update start time.
1201+
If so, the new timestamp metadata file becomes the trusted timestamp
12021202
metadata file. If the new timestamp metadata file has expired, discard it,
12031203
abort the update cycle, and report the potential freeze attack.
12041204

@@ -1243,10 +1243,10 @@ the timestamp metadata file.
12431243
the update cycle, and report the failure.
12441244

12451245
* **5.4.5**. **Check for a freeze attack.** The expiration timestamp in the
1246-
new snapshot metadata file MUST be higher than the fixed update expiration
1247-
time. If so, the new snapshot metadata file becomes the trusted snapshot
1248-
metadata file. If the new snapshot metadata file is expired, discard it,
1249-
abort the update cycle, and report the potential freeze attack.
1246+
new snapshot metadata file MUST be higher than the fixed update start time.
1247+
If so, the new snapshot metadata file becomes the trusted snapshot metadata
1248+
file. If the new snapshot metadata file is expired, discard it, abort the
1249+
update cycle, and report the potential freeze attack.
12501250

12511251

12521252
* **5.4.6**. **Persist snapshot metadata.** The client MUST write the file to
@@ -1280,10 +1280,10 @@ snapshot metadata file.
12801280
abort the update cycle, and report the failure.
12811281

12821282
* **5.5.4**. **Check for a freeze attack.** The expiration timestamp in the
1283-
new targets metadata file MUST be higher than the fixed update expiration
1284-
time. If so, the new targets metadata file becomes the trusted targets
1285-
metadata file. If the new targets metadata file is expired, discard it,
1286-
abort the update cycle, and report the potential freeze attack.
1283+
new targets metadata file MUST be higher than the fixed update start time.
1284+
If so, the new targets metadata file becomes the trusted targets metadata
1285+
file. If the new targets metadata file is expired, discard it, abort the
1286+
update cycle, and report the potential freeze attack.
12871287

12881288
* **5.5.5**. **Persist targets metadata.** The client MUST write the file to
12891289
non-volatile storage as FILENAME.EXT (e.g. targets.json).

0 commit comments

Comments
 (0)