Skip to content

Commit fa2d263

Browse files
committed
Clarify recovery from ffwd on top-level targets
To recover from a fast-forward attack on the top-level targets metadata, only targets and snapshot (not timestamp) metadata must be untrusted/deleted. Targets, because it was attacker controlled, and snapshot, because it unwittingly might have unwittingly recorded the attacker controlled targets version.
1 parent b677f6a commit fa2d263

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

tuf-spec.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1142,9 +1142,10 @@ repo](https://github.com/theupdateframework/specification/issues).
11421142
paper](https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf)
11431143
for more details.
11441144

1145-
* **1.9.1**. **Targets recovery** If a threshold of targets keys are removed
1146-
from the root metadata, delete the old top-level targets, snapshot, and
1147-
timestamp metadata files.
1145+
* **1.9.1**. **Targets recovery** If a threshold of targets keys have been
1146+
removed in the new trusted root metadata compared to the previous trusted
1147+
root metadata, delete the old top-level targets and snapshot metadata
1148+
files.
11481149

11491150
* **1.9.2**. **Snapshot recovery** If a threshold of snapshot keys have
11501151
been removed in the new trusted root metadata compared to the previous

0 commit comments

Comments
 (0)