@@ -1264,32 +1264,30 @@ non-volatile storage as FILENAME.EXT.
1264
1264
version number of the new DELEGATE metadata file MUST match the trusted
1265
1265
snapshot metadata. This is done, in part, to prevent a mix-and-match
1266
1266
attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1267
- does not match, discard it, end the search, and report the target cannot
1268
- be found.
1267
+ does not match, abort the update cycle, and report the failure.
1269
1268
1270
1269
* ** 4.5.2.4** . ** Check for an arbitrary software attack.** The new DELEGATE
1271
1270
metadata file MUST have been signed by a threshold of keys specified in the
1272
1271
TARGETS metadata file. If the new DELEGATE metadata file is not signed
1273
- as required, discard it, end the search, and report the target cannot be
1274
- found.
1272
+ as required, abort the update cycle, and report the failure.
1275
1273
1276
1274
* ** 4.5.2.5** . ** Check for a rollback attack.** The version number of the
1277
1275
trusted DELEGATE metadata file, if any, MUST be less than or equal to the
1278
1276
version number of the new DELEGATE metadata file. If the new DELEGATE
1279
1277
metadata file is older than the trusted DELEGATE metadata file, discard
1280
- it, end the search , and report the target cannot be found .
1278
+ it, abort the update cycle , and report the potential rollback attack .
1281
1279
1282
1280
* ** 4.5.2.6** . ** Check for a freeze attack.** The latest known time
1283
1281
should be lower than the expiration timestamp in the new DELEGATE
1284
1282
metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1285
- file. If the new DELEGATE metadata file is expired, discard it, end the
1286
- search , and report the target cannot be found .
1283
+ file. If the new DELEGATE metadata file is expired, abort the update
1284
+ cycle , and report the potential freeze attack .
1287
1285
1288
1286
* ** 4.5.2.7** . If the current delegation is a multi-role delegation,
1289
1287
recursively visit each role, and check that each has signed exactly the
1290
1288
same non-custom metadata (i.e., length and hashes) about the target (or
1291
- the lack of any such metadata). Otherwise, discard it, end the search,
1292
- and report the target cannot be found .
1289
+ the lack of any such metadata). Otherwise, abort the update cycle, and
1290
+ report the failure .
1293
1291
1294
1292
* ** 4.5.2.8** . If the current delegation is a terminating delegation,
1295
1293
then jump to step 5.
0 commit comments