@@ -1286,55 +1286,55 @@ non-volatile storage as FILENAME.EXT.
1286
1286
* ** 4.5.2** . Otherwise, recursively search the list of delegations in order
1287
1287
of appearance.
1288
1288
1289
- * ** 4.5.2.1** . Let DELEGATE denote the current target role TARGETS is
1289
+ * ** 4.5.2.1** . Let DELEGATEE denote the current target role TARGETS is
1290
1290
delegating to.
1291
1291
1292
1292
* ** 4.5.2.2** . ** Fast-forward attack recovery.** If a threshold of
1293
1293
delegated targets keys for the current delegation are removed from the
1294
- TARGETS metadata, delete the trusted DELEGATE metadata, if any, and the
1294
+ TARGETS metadata, delete the trusted DELEGATEE metadata, if any, and the
1295
1295
previously trusted snapshot metadata.
1296
1296
1297
1297
* ** 4.5.2.3** . ** Check for a rollback attack via snapshot.** The version number of the
1298
- DELEGATE metadata in the previous trusted snapshot metadata, if any, MUST
1298
+ DELEGATEE metadata in the previous trusted snapshot metadata, if any, MUST
1299
1299
be less than or equal to its version number in the new trusted snapshot
1300
1300
metadata. If this is not the case, abort the update cycle, and report the
1301
1301
potential rollback attack.
1302
1302
1303
- * ** 4.5.2.4** . ** Download the DELEGATE targets metadata file** , up to either
1303
+ * ** 4.5.2.4** . ** Download the DELEGATEE targets metadata file** , up to either
1304
1304
the number of bytes specified in the snapshot metadata file, or some Z
1305
1305
number of bytes. The value for Z is set by the authors of the application
1306
- using TUF. For example, Z may be tens of kilobytes. IF DELEGATE cannot be
1306
+ using TUF. For example, Z may be tens of kilobytes. IF DELEGATEE cannot be
1307
1307
found, end the search and report the target cannot be found. If
1308
1308
consistent snapshots are not used (see Section 7), then the filename used
1309
1309
to download the targets metadata file is of the fixed form FILENAME.EXT
1310
1310
(e.g., delegated_role.json). Otherwise, the filename is of the form
1311
1311
VERSION_NUMBER.FILENAME.EXT (e.g., 42.delegated_role.json), where
1312
- VERSION_NUMBER is the version number of the DELEGATE metadata file listed
1312
+ VERSION_NUMBER is the version number of the DELEGATEE metadata file listed
1313
1313
in the snapshot metadata file. In either case, the client MUST write the
1314
1314
file to non-volatile storage as FILENAME.EXT.
1315
1315
1316
1316
* ** 4.5.2.5** . ** Check against snapshot metadata.** The hashes (if any), and
1317
- version number of the new DELEGATE metadata file MUST match the trusted
1317
+ version number of the new DELEGATEE metadata file MUST match the trusted
1318
1318
snapshot metadata, if any. This is done, in part, to prevent a mix-and-match
1319
- attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1319
+ attack by man-in-the-middle attackers. If the new DELEGATEE metadata file
1320
1320
does not match, abort the update cycle, and report the failure.
1321
1321
1322
- * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATE
1322
+ * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATEE
1323
1323
metadata file MUST have been signed by a threshold of keys specified in the
1324
- TARGETS metadata file. If the new DELEGATE metadata file is not signed
1324
+ TARGETS metadata file. If the new DELEGATEE metadata file is not signed
1325
1325
as required, abort the update cycle, and report the failure.
1326
1326
1327
- * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATE metadata.**
1328
- The version number of the trusted DELEGATE metadata file, if any, MUST be
1329
- less than or equal to the version number of the new DELEGATE metadata
1330
- file. If the new DELEGATE metadata file is older than the trusted
1331
- DELEGATE metadata file abort the update cycle, and report the potential
1327
+ * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATEE metadata.**
1328
+ The version number of the trusted DELEGATEE metadata file, if any, MUST be
1329
+ less than or equal to the version number of the new DELEGATEE metadata
1330
+ file. If the new DELEGATEE metadata file is older than the trusted
1331
+ DELEGATEE metadata file abort the update cycle, and report the potential
1332
1332
rollback attack.
1333
1333
1334
1334
* ** 4.5.2.8** . ** Check for a freeze attack.** The latest known time
1335
- should be lower than the expiration timestamp in the new DELEGATE
1336
- metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1337
- file. If the new DELEGATE metadata file is expired, abort the update
1335
+ should be lower than the expiration timestamp in the new DELEGATEE
1336
+ metadata file. If so, the new DELEGATEE file becomes the trusted DELEGATEE
1337
+ file. If the new DELEGATEE metadata file is expired, abort the update
1338
1338
cycle, and report the potential freeze attack.
1339
1339
1340
1340
* ** 4.5.2.9** . If the current delegation is a multi-role delegation,
@@ -1348,7 +1348,7 @@ non-volatile storage as FILENAME.EXT.
1348
1348
1349
1349
* ** 4.5.2.11** . Otherwise, if the current delegation is a non-terminating
1350
1350
delegation, continue processing the next delegation, if any, by repeating
1351
- step 4.5 with DELEGATE as the current TARGET role. Stop the search, and
1351
+ step 4.5 with DELEGATEE as the current TARGET role. Stop the search, and
1352
1352
jump to step 5 as soon as a delegation returns a result.
1353
1353
1354
1354
** 5** . ** Verify the desired target against its targets metadata** .
0 commit comments