Skip to content

Commit 64ae82c

Browse files
committed
Remove 2nd snapshot rollback attack check
This shares the same justification for removal as #65. Step 3.3.1 was made redundant by #106, which modified the workflow to add 2.2.2, where updating the timestamp will also check if the new timestamp contains a snapshot version that is less than the trusted snapshot version. This, in combination with the 3.1 check that asserts hashes and version of the actual snapshot metadata match the ones in the new trusted timestamp, make another version check, i.e, the one removed in this commit, obsolete.
1 parent 39c80de commit 64ae82c

File tree

1 file changed

+10
-18
lines changed

1 file changed

+10
-18
lines changed

tuf-spec.md

Lines changed: 10 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
# <p align="center">The Update Framework Specification
22

3-
Last modified: **26 August 2020**
3+
Last modified: **23 September 2020**
44

5-
Version: **1.0.5**
5+
Version: **1.0.6**
66

77
We strive to make the specification easy to implement, so if you come across
88
any inconsistencies or experience any difficulty, do let us know by sending an
@@ -1199,22 +1199,14 @@ non-volatile storage as FILENAME.EXT.
11991199
file. If the new snapshot metadata file is not signed as required, discard
12001200
it, abort the update cycle, and report the signature failure.
12011201

1202-
* **3.3**. **Check for a rollback attack.**
1203-
1204-
* **3.3.1**. The version number of the trusted snapshot metadata file, if
1205-
any, MUST be less than or equal to the version number of the new snapshot
1206-
metadata file. If the new snapshot metadata file is older than the trusted
1207-
metadata file, discard it, abort the update cycle, and report the potential
1208-
rollback attack.
1209-
1210-
* **3.3.2**. The version number of the targets metadata file, and all
1211-
delegated targets metadata files (if any), in the trusted snapshot metadata
1212-
file, if any, MUST be less than or equal to its version number in the new
1213-
snapshot metadata file. Furthermore, any targets metadata filename that was
1214-
listed in the trusted snapshot metadata file, if any, MUST continue to be
1215-
listed in the new snapshot metadata file. If any of these conditions are
1216-
not met, discard the new snapshot metadadata file, abort the update cycle,
1217-
and report the failure.
1202+
* **3.3**. **Check for a rollback attack.** The version number of the targets
1203+
metadata file, and all delegated targets metadata files (if any), in the
1204+
trusted snapshot metadata file, if any, MUST be less than or equal to its
1205+
version number in the new snapshot metadata file. Furthermore, any targets
1206+
metadata filename that was listed in the trusted snapshot metadata file, if
1207+
any, MUST continue to be listed in the new snapshot metadata file. If any of
1208+
these conditions are not met, discard the new snapshot metadadata file, abort
1209+
the update cycle, and report the failure.
12181210

12191211
* **3.4**. **Check for a freeze attack.** The latest known time should be
12201212
lower than the expiration timestamp in the new snapshot metadata file. If

0 commit comments

Comments
 (0)