@@ -1271,32 +1271,30 @@ non-volatile storage as FILENAME.EXT.
1271
1271
version number of the new DELEGATE metadata file MUST match the trusted
1272
1272
snapshot metadata. This is done, in part, to prevent a mix-and-match
1273
1273
attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1274
- does not match, discard it, end the search, and report the target cannot
1275
- be found.
1274
+ does not match, abort the update cycle, and report the failure.
1276
1275
1277
1276
* ** 4.5.2.4** . ** Check for an arbitrary software attack.** The new DELEGATE
1278
1277
metadata file MUST have been signed by a threshold of keys specified in the
1279
1278
TARGETS metadata file. If the new DELEGATE metadata file is not signed
1280
- as required, discard it, end the search, and report the target cannot be
1281
- found.
1279
+ as required, abort the update cycle, and report the failure.
1282
1280
1283
1281
* ** 4.5.2.5** . ** Check for a rollback attack.** The version number of the
1284
1282
trusted DELEGATE metadata file, if any, MUST be less than or equal to the
1285
1283
version number of the new DELEGATE metadata file. If the new DELEGATE
1286
1284
metadata file is older than the trusted DELEGATE metadata file, discard
1287
- it, end the search , and report the target cannot be found .
1285
+ it, abort the update cycle , and report the potential rollback attack .
1288
1286
1289
1287
* ** 4.5.2.6** . ** Check for a freeze attack.** The latest known time
1290
1288
should be lower than the expiration timestamp in the new DELEGATE
1291
1289
metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1292
- file. If the new DELEGATE metadata file is expired, discard it, end the
1293
- search , and report the target cannot be found .
1290
+ file. If the new DELEGATE metadata file is expired, abort the update
1291
+ cycle , and report the potential freeze attack .
1294
1292
1295
1293
* ** 4.5.2.7** . If the current delegation is a multi-role delegation,
1296
1294
recursively visit each role, and check that each has signed exactly the
1297
1295
same non-custom metadata (i.e., length and hashes) about the target (or
1298
- the lack of any such metadata). Otherwise, discard it, end the search,
1299
- and report the target cannot be found .
1296
+ the lack of any such metadata). Otherwise, abort the update cycle, and
1297
+ report the failure .
1300
1298
1301
1299
* ** 4.5.2.8** . If the current delegation is a terminating delegation,
1302
1300
then jump to step 5.
0 commit comments