@@ -1268,32 +1268,30 @@ non-volatile storage as FILENAME.EXT.
1268
1268
version number of the new DELEGATE metadata file MUST match the trusted
1269
1269
snapshot metadata. This is done, in part, to prevent a mix-and-match
1270
1270
attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1271
- does not match, discard it, end the search, and report the target cannot
1272
- be found.
1271
+ does not match, abort the update cycle, and report the failure.
1273
1272
1274
1273
* ** 4.5.2.4** . ** Check for an arbitrary software attack.** The new DELEGATE
1275
1274
metadata file MUST have been signed by a threshold of keys specified in the
1276
1275
TARGETS metadata file. If the new DELEGATE metadata file is not signed
1277
- as required, discard it, end the search, and report the target cannot be
1278
- found.
1276
+ as required, abort the update cycle, and report the failure.
1279
1277
1280
1278
* ** 4.5.2.5** . ** Check for a rollback attack.** The version number of the
1281
1279
trusted DELEGATE metadata file, if any, MUST be less than or equal to the
1282
1280
version number of the new DELEGATE metadata file. If the new DELEGATE
1283
1281
metadata file is older than the trusted DELEGATE metadata file, discard
1284
- it, end the search , and report the target cannot be found .
1282
+ it, abort the update cycle , and report the potential rollback attack .
1285
1283
1286
1284
* ** 4.5.2.6** . ** Check for a freeze attack.** The latest known time
1287
1285
should be lower than the expiration timestamp in the new DELEGATE
1288
1286
metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1289
- file. If the new DELEGATE metadata file is expired, discard it, end the
1290
- search , and report the target cannot be found .
1287
+ file. If the new DELEGATE metadata file is expired, abort the update
1288
+ cycle , and report the potential freeze attack .
1291
1289
1292
1290
* ** 4.5.2.7** . If the current delegation is a multi-role delegation,
1293
1291
recursively visit each role, and check that each has signed exactly the
1294
1292
same non-custom metadata (i.e., length and hashes) about the target (or
1295
- the lack of any such metadata). Otherwise, discard it, end the search,
1296
- and report the target cannot be found .
1293
+ the lack of any such metadata). Otherwise, abort the update cycle, and
1294
+ report the failure .
1297
1295
1298
1296
* ** 4.5.2.8** . If the current delegation is a terminating delegation,
1299
1297
then jump to step 5.
0 commit comments