@@ -1291,32 +1291,30 @@ non-volatile storage as FILENAME.EXT.
1291
1291
version number of the new DELEGATE metadata file MUST match the trusted
1292
1292
snapshot metadata. This is done, in part, to prevent a mix-and-match
1293
1293
attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1294
- does not match, discard it, end the search, and report the target cannot
1295
- be found.
1294
+ does not match, abort the update cycle, and report the failure.
1296
1295
1297
1296
* ** 4.5.2.4** . ** Check for an arbitrary software attack.** The new DELEGATE
1298
1297
metadata file MUST have been signed by a threshold of keys specified in the
1299
1298
TARGETS metadata file. If the new DELEGATE metadata file is not signed
1300
- as required, discard it, end the search, and report the target cannot be
1301
- found.
1299
+ as required, abort the update cycle, and report the failure.
1302
1300
1303
1301
* ** 4.5.2.5** . ** Check for a rollback attack.** The version number of the
1304
1302
trusted DELEGATE metadata file, if any, MUST be less than or equal to the
1305
1303
version number of the new DELEGATE metadata file. If the new DELEGATE
1306
1304
metadata file is older than the trusted DELEGATE metadata file, discard
1307
- it, end the search , and report the target cannot be found .
1305
+ it, abort the update cycle , and report the potential rollback attack .
1308
1306
1309
1307
* ** 4.5.2.6** . ** Check for a freeze attack.** The latest known time
1310
1308
should be lower than the expiration timestamp in the new DELEGATE
1311
1309
metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1312
- file. If the new DELEGATE metadata file is expired, discard it, end the
1313
- search , and report the target cannot be found .
1310
+ file. If the new DELEGATE metadata file is expired, abort the update
1311
+ cycle , and report the potential freeze attack .
1314
1312
1315
1313
* ** 4.5.2.7** . If the current delegation is a multi-role delegation,
1316
1314
recursively visit each role, and check that each has signed exactly the
1317
1315
same non-custom metadata (i.e., length and hashes) about the target (or
1318
- the lack of any such metadata). Otherwise, discard it, end the search,
1319
- and report the target cannot be found .
1316
+ the lack of any such metadata). Otherwise, abort the update cycle, and
1317
+ report the failure .
1320
1318
1321
1319
* ** 4.5.2.8** . If the current delegation is a terminating delegation,
1322
1320
then jump to step 5.
0 commit comments