Skip to content

Commit dd112ec

Browse files
lukpuehmnm678
authored andcommitted
Adopt reporting wording for delegated targets
Recent commits added a detailed verification workflow for delegated targets, including check against snapshot, and signature, version and timestamp checks. This commit adopts the failure reporting phrasing used elsewhere in the client workflow.
1 parent 95b49b1 commit dd112ec

File tree

1 file changed

+7
-9
lines changed

1 file changed

+7
-9
lines changed

tuf-spec.md

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1489,32 +1489,30 @@ it in the next step.
14891489
version number of the new DELEGATE metadata file MUST match the trusted
14901490
snapshot metadata. This is done, in part, to prevent a mix-and-match
14911491
attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1492-
does not match, discard it, end the search, and report the target cannot
1493-
be found.
1492+
does not match, abort the update cycle, and report the failure.
14941493

14951494
4. **Check for an arbitrary software attack.** The new DELEGATE
14961495
metadata file MUST have been signed by a threshold of keys specified in the
14971496
TARGETS metadata file. If the new DELEGATE metadata file is not signed
1498-
as required, discard it, end the search, and report the target cannot be
1499-
found.
1497+
as required, abort the update cycle, and report the failure.
15001498

15011499
5. **Check for a rollback attack.** The version number of the
15021500
trusted DELEGATE metadata file, if any, MUST be less than or equal to the
15031501
version number of the new DELEGATE metadata file. If the new DELEGATE
15041502
metadata file is older than the trusted DELEGATE metadata file, discard
1505-
it, end the search, and report the target cannot be found.
1503+
it, abort the update cycle, and report the potential rollback attack.
15061504

15071505
6. **Check for a freeze attack.** The latest known time
15081506
should be lower than the expiration timestamp in the new DELEGATE
15091507
metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1510-
file. If the new DELEGATE metadata file is expired, discard it, end the
1511-
search, and report the target cannot be found.
1508+
file. If the new DELEGATE metadata file is expired, abort the update
1509+
cycle, and report the potential freeze attack.
15121510

15131511
7. If the current delegation is a multi-role delegation,
15141512
recursively visit each role, and check that each has signed exactly the
15151513
same non-custom metadata (i.e., length and hashes) about the target (or
1516-
the lack of any such metadata). Otherwise, discard it, end the search,
1517-
and report the target cannot be found.
1514+
the lack of any such metadata). Otherwise, abort the update cycle, and
1515+
report the failure.
15181516

15191517
7. If the current delegation is a terminating delegation,
15201518
then jump to step [[#fetch-target]].

0 commit comments

Comments
 (0)