Skip to content

Commit 9cbeb2a

Browse files
committed
Clarify recovery from ffwd on top-level targets
To recover from a fast-forward attack on the top-level targets metadata, only targets and snapshot (not timestamp) metadata must be untrusted/deleted. Targets, because it was attacker controlled, and snapshot, because it unwittingly might have unwittingly recorded the attacker controlled targets version.
1 parent 16c99f8 commit 9cbeb2a

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

tuf-spec.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1125,9 +1125,10 @@ repo](https://github.com/theupdateframework/specification/issues).
11251125
paper](https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf)
11261126
for more details.
11271127

1128-
* **1.9.1**. **Targets recovery** If a threshold of targets keys are removed
1129-
from the root metadata, delete the old top-level targets, snapshot, and
1130-
timestamp metadata files.
1128+
* **1.9.1**. **Targets recovery** If a threshold of targets keys have been
1129+
removed in the new trusted root metadata compared to the previous trusted
1130+
root metadata, delete the old top-level targets and snapshot metadata
1131+
files.
11311132

11321133
* **1.9.2**. **Snapshot recovery** If a threshold of snapshot keys have
11331134
been removed in the new trusted root metadata compared to the previous

0 commit comments

Comments
 (0)