|
1 | 1 | # <p align="center">The Update Framework Specification
|
2 | 2 |
|
3 |
| -Last modified: **26 August 2020** |
| 3 | +Last modified: **23 September 2020** |
4 | 4 |
|
5 |
| -Version: **1.0.5** |
| 5 | +Version: **1.0.6** |
6 | 6 |
|
7 | 7 | We strive to make the specification easy to implement, so if you come across
|
8 | 8 | any inconsistencies or experience any difficulty, do let us know by sending an
|
@@ -1199,22 +1199,14 @@ non-volatile storage as FILENAME.EXT.
|
1199 | 1199 | file. If the new snapshot metadata file is not signed as required, discard
|
1200 | 1200 | it, abort the update cycle, and report the signature failure.
|
1201 | 1201 |
|
1202 |
| - * **3.3**. **Check for a rollback attack.** |
1203 |
| - |
1204 |
| - * **3.3.1**. The version number of the trusted snapshot metadata file, if |
1205 |
| - any, MUST be less than or equal to the version number of the new snapshot |
1206 |
| - metadata file. If the new snapshot metadata file is older than the trusted |
1207 |
| - metadata file, discard it, abort the update cycle, and report the potential |
1208 |
| - rollback attack. |
1209 |
| - |
1210 |
| - * **3.3.2**. The version number of the targets metadata file, and all |
1211 |
| - delegated targets metadata files (if any), in the trusted snapshot metadata |
1212 |
| - file, if any, MUST be less than or equal to its version number in the new |
1213 |
| - snapshot metadata file. Furthermore, any targets metadata filename that was |
1214 |
| - listed in the trusted snapshot metadata file, if any, MUST continue to be |
1215 |
| - listed in the new snapshot metadata file. If any of these conditions are |
1216 |
| - not met, discard the new snapshot metadadata file, abort the update cycle, |
1217 |
| - and report the failure. |
| 1202 | + * **3.3**. **Check for a rollback attack.** The version number of the targets |
| 1203 | + metadata file, and all delegated targets metadata files (if any), in the |
| 1204 | + trusted snapshot metadata file, if any, MUST be less than or equal to its |
| 1205 | + version number in the new snapshot metadata file. Furthermore, any targets |
| 1206 | + metadata filename that was listed in the trusted snapshot metadata file, if |
| 1207 | + any, MUST continue to be listed in the new snapshot metadata file. If any of |
| 1208 | + these conditions are not met, discard the new snapshot metadadata file, abort |
| 1209 | + the update cycle, and report the failure. |
1218 | 1210 |
|
1219 | 1211 | * **3.4**. **Check for a freeze attack.** The latest known time should be
|
1220 | 1212 | lower than the expiration timestamp in the new snapshot metadata file. If
|
|
0 commit comments