File tree 1 file changed +5
-2
lines changed
1 file changed +5
-2
lines changed Original file line number Diff line number Diff line change @@ -1118,12 +1118,15 @@ repo](https://github.com/theupdateframework/specification/issues).
1118
1118
1119
1119
* ** 1.9** . ** Fast-forward attack recovery** A _ fast-forward attack_ happens
1120
1120
when attackers arbitrarily increase the version numbers in any of the
1121
- timestamp, snapshot, targets, or delegated targets metadata. To recover from
1121
+ timestamp, snapshot, targets, or delegated targets metadata. The attacker goal
1122
+ is to cause clients to refuse to update the metadata later because the attacker's
1123
+ listed metadata version number (possibly MAX_INT) is greater than the new valid
1124
+ version. To recover from
1122
1125
fast-forward attacks after the repository has been compromised and recovered,
1123
1126
certain metadata files need to be deleted as specified in this section.
1124
1127
Please see [ the Mercury
1125
1128
paper] ( https://ssl.engineering.nyu.edu/papers/kuppusamy-mercury-usenix-2017.pdf )
1126
- for more details.
1129
+ for more details on fast-forward attacks .
1127
1130
1128
1131
* ** 1.9.1** . ** Targets recovery** If a threshold of targets keys have been
1129
1132
removed in the new trusted root metadata compared to the previous trusted
You can’t perform that action at this time.
0 commit comments