@@ -1092,8 +1092,8 @@ repo](https://github.com/theupdateframework/specification/issues).
1092
1092
process should not leave clients in an unrecoverable state.
1093
1093
1094
1094
** 5.0** . ** Record the time at which the update began** as the fixed update
1095
- expiration time. Time is fixed at the beginning of the update workflow to
1096
- allow an application using TUF to effectively pause time, in order to prevent
1095
+ start time. Time is fixed at the beginning of the update workflow to allow
1096
+ an application using TUF to effectively pause time, in order to prevent
1097
1097
metadata which is valid at the beginning of an update from expiring during
1098
1098
the update workflow.
1099
1099
@@ -1153,10 +1153,10 @@ repo](https://github.com/theupdateframework/specification/issues).
1153
1153
* ** 5.2.8** . ** Repeat steps 5.2.1 to 5.2.8** .
1154
1154
1155
1155
* ** 5.2.9** . ** Check for a freeze attack.** The expiration timestamp in the
1156
- trusted root metadata file MUST be higher than the fixed update expiration
1157
- time. If the trusted root metadata file has expired, abort the update
1158
- cycle, report the potential freeze attack. On the next update cycle, begin
1159
- at step 5.1 and version N of the root metadata file.
1156
+ trusted root metadata file MUST be higher than the fixed update start time.
1157
+ If the trusted root metadata file has expired, abort the update cycle,
1158
+ report the potential freeze attack. On the next update cycle, begin at step
1159
+ 5.1 and version N of the root metadata file.
1160
1160
1161
1161
* ** 5.2.10** . ** If the timestamp and / or snapshot keys have been rotated,
1162
1162
then delete the trusted timestamp and snapshot metadata files.** This is done
@@ -1197,8 +1197,8 @@ used to download the timestamp metadata file is of the fixed form FILENAME.EXT
1197
1197
timestamp metadata file, abort the update cycle, and report the failure.
1198
1198
1199
1199
* ** 5.3.3** . ** Check for a freeze attack.** The expiration timestamp in the
1200
- new timestamp metadata file MUST be higher than the fixed update expiration
1201
- time. If so, the new timestamp metadata file becomes the trusted timestamp
1200
+ new timestamp metadata file MUST be higher than the fixed update start time.
1201
+ If so, the new timestamp metadata file becomes the trusted timestamp
1202
1202
metadata file. If the new timestamp metadata file has expired, discard it,
1203
1203
abort the update cycle, and report the potential freeze attack.
1204
1204
@@ -1243,10 +1243,10 @@ the timestamp metadata file.
1243
1243
the update cycle, and report the failure.
1244
1244
1245
1245
* ** 5.4.5** . ** Check for a freeze attack.** The expiration timestamp in the
1246
- new snapshot metadata file MUST be higher than the fixed update expiration
1247
- time. If so, the new snapshot metadata file becomes the trusted snapshot
1248
- metadata file. If the new snapshot metadata file is expired, discard it,
1249
- abort the update cycle, and report the potential freeze attack.
1246
+ new snapshot metadata file MUST be higher than the fixed update start time.
1247
+ If so, the new snapshot metadata file becomes the trusted snapshot metadata
1248
+ file. If the new snapshot metadata file is expired, discard it, abort the
1249
+ update cycle, and report the potential freeze attack.
1250
1250
1251
1251
1252
1252
* ** 5.4.6** . ** Persist snapshot metadata.** The client MUST write the file to
@@ -1280,10 +1280,10 @@ snapshot metadata file.
1280
1280
abort the update cycle, and report the failure.
1281
1281
1282
1282
* ** 5.5.4** . ** Check for a freeze attack.** The expiration timestamp in the
1283
- new targets metadata file MUST be higher than the fixed update expiration
1284
- time. If so, the new targets metadata file becomes the trusted targets
1285
- metadata file. If the new targets metadata file is expired, discard it,
1286
- abort the update cycle, and report the potential freeze attack.
1283
+ new targets metadata file MUST be higher than the fixed update start time.
1284
+ If so, the new targets metadata file becomes the trusted targets metadata
1285
+ file. If the new targets metadata file is expired, discard it, abort the
1286
+ update cycle, and report the potential freeze attack.
1287
1287
1288
1288
* ** 5.5.5** . ** Persist targets metadata.** The client MUST write the file to
1289
1289
non-volatile storage as FILENAME.EXT (e.g. targets.json).
0 commit comments