Skip to content

Commit 21731f4

Browse files
committed
Remove redundant description of delegated targests fast forward recovery
The description of fast forward attack recovery for delegated targets was added to the previous paragraph, and so the description is redundant. Signed-off-by: Marina Moore <mnm678@gmail.com>
1 parent afae66c commit 21731f4

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

tuf-spec.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1333,10 +1333,8 @@ it in the next step.
13331333
1. **Targets recovery** If a threshold of targets keys have been
13341334
removed in the new trusted root metadata compared to the previous trusted
13351335
root metadata, delete the old top-level targets and snapshot metadata
1336-
files. Note that delegated targets are susceptible to fast forward attacks,
1337-
because snapshot must be checked before a key rotation in the delegating
1338-
target role is known to the client. To fix this, nuke delegation or make
1339-
repository rotate the the snapshot key.
1336+
files. Note that this only applies to top-level targets metadata whose
1337+
keys are listed in root metadata.
13401338

13411339
2. **Snapshot recovery** If a threshold of snapshot keys have
13421340
been removed in the new trusted root metadata compared to the previous
@@ -1417,7 +1415,8 @@ it in the next step.
14171415
in the trusted timestamp metadata. If the versions do not match, discard the
14181416
new snapshot metadata, abort the update cycle, and report the failure.
14191417

1420-
5. **Check for a rollback attack**. The version number of all targets metadata files in the
1418+
5. **Check for a rollback attack**. The version number of all targets metadata
1419+
files in the
14211420
trusted snapshot metadata file, if any, MUST be less than or equal to their
14221421
version numbers in the new snapshot metadata file. Furthermore, any targets
14231422
metadata filename that was listed in the trusted snapshot metadata file, if

0 commit comments

Comments
 (0)