Skip to content

Commit 123c06c

Browse files
committed
Clarify recovery from ffwd on top-level targets
To recover from a fast-forward attack on the top-level targets metadata, only targets and snapshot (not timestamp) metadata must be untrusted/deleted. Targets, because it was attacker controlled, and snapshot, because it unwittingly might have unwittingly recorded the attacker controlled targets version.
1 parent fc940bf commit 123c06c

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

tuf-spec.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1121,9 +1121,10 @@ repo](https://github.com/theupdateframework/specification/issues).
11211121
paper](https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf)
11221122
for more details.
11231123

1124-
* **1.9.1**. **Targets recovery** If a threshold of targets keys are removed
1125-
from the root metadata, delete the old top-level targets, snapshot, and
1126-
timestamp metadata files.
1124+
* **1.9.1**. **Targets recovery** If a threshold of targets keys have been
1125+
removed in the new trusted root metadata compared to the previous trusted
1126+
root metadata, delete the old top-level targets and snapshot metadata
1127+
files.
11271128

11281129
* **1.9.2**. **Snapshot recovery** If a threshold of snapshot keys have
11291130
been removed in the new trusted root metadata compared to the previous

0 commit comments

Comments
 (0)