@@ -1263,55 +1263,55 @@ non-volatile storage as FILENAME.EXT.
1263
1263
* ** 4.5.2** . Otherwise, recursively search the list of delegations in order
1264
1264
of appearance.
1265
1265
1266
- * ** 4.5.2.1** . Let DELEGATE denote the current target role TARGETS is
1266
+ * ** 4.5.2.1** . Let DELEGATEE denote the current target role TARGETS is
1267
1267
delegating to.
1268
1268
1269
1269
* ** 4.5.2.2** . ** Fast-forward attack recovery.** If a threshold of
1270
1270
delegated targets keys for the current delegation are removed from the
1271
- TARGETS metadata, delete the trusted DELEGATE metadata, if any, and the
1271
+ TARGETS metadata, delete the trusted DELEGATEE metadata, if any, and the
1272
1272
previously trusted snapshot metadata.
1273
1273
1274
1274
* ** 4.5.2.3** . ** Check for a rollback attack via snapshot.** The version number of the
1275
- DELEGATE metadata in the previous trusted snapshot metadata, if any, MUST
1275
+ DELEGATEE metadata in the previous trusted snapshot metadata, if any, MUST
1276
1276
be less than or equal to its version number in the new trusted snapshot
1277
1277
metadata. If this is not the case, abort the update cycle, and report the
1278
1278
potential rollback attack.
1279
1279
1280
- * ** 4.5.2.4** . ** Download the DELEGATE targets metadata file** , up to either
1280
+ * ** 4.5.2.4** . ** Download the DELEGATEE targets metadata file** , up to either
1281
1281
the number of bytes specified in the snapshot metadata file, or some Z
1282
1282
number of bytes. The value for Z is set by the authors of the application
1283
- using TUF. For example, Z may be tens of kilobytes. IF DELEGATE cannot be
1283
+ using TUF. For example, Z may be tens of kilobytes. IF DELEGATEE cannot be
1284
1284
found, end the search and report the target cannot be found. If
1285
1285
consistent snapshots are not used (see Section 7), then the filename used
1286
1286
to download the targets metadata file is of the fixed form FILENAME.EXT
1287
1287
(e.g., delegated_role.json). Otherwise, the filename is of the form
1288
1288
VERSION_NUMBER.FILENAME.EXT (e.g., 42.delegated_role.json), where
1289
- VERSION_NUMBER is the version number of the DELEGATE metadata file listed
1289
+ VERSION_NUMBER is the version number of the DELEGATEE metadata file listed
1290
1290
in the snapshot metadata file. In either case, the client MUST write the
1291
1291
file to non-volatile storage as FILENAME.EXT.
1292
1292
1293
1293
* ** 4.5.2.5** . ** Check against snapshot metadata.** The hashes (if any), and
1294
- version number of the new DELEGATE metadata file MUST match the trusted
1294
+ version number of the new DELEGATEE metadata file MUST match the trusted
1295
1295
snapshot metadata, if any. This is done, in part, to prevent a mix-and-match
1296
- attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1296
+ attack by man-in-the-middle attackers. If the new DELEGATEE metadata file
1297
1297
does not match, abort the update cycle, and report the failure.
1298
1298
1299
- * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATE
1299
+ * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATEE
1300
1300
metadata file MUST have been signed by a threshold of keys specified in the
1301
- TARGETS metadata file. If the new DELEGATE metadata file is not signed
1301
+ TARGETS metadata file. If the new DELEGATEE metadata file is not signed
1302
1302
as required, abort the update cycle, and report the failure.
1303
1303
1304
- * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATE metadata.**
1305
- The version number of the trusted DELEGATE metadata file, if any, MUST be
1306
- less than or equal to the version number of the new DELEGATE metadata
1307
- file. If the new DELEGATE metadata file is older than the trusted
1308
- DELEGATE metadata file abort the update cycle, and report the potential
1304
+ * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATEE metadata.**
1305
+ The version number of the trusted DELEGATEE metadata file, if any, MUST be
1306
+ less than or equal to the version number of the new DELEGATEE metadata
1307
+ file. If the new DELEGATEE metadata file is older than the trusted
1308
+ DELEGATEE metadata file abort the update cycle, and report the potential
1309
1309
rollback attack.
1310
1310
1311
1311
* ** 4.5.2.8** . ** Check for a freeze attack.** The latest known time
1312
- should be lower than the expiration timestamp in the new DELEGATE
1313
- metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1314
- file. If the new DELEGATE metadata file is expired, abort the update
1312
+ should be lower than the expiration timestamp in the new DELEGATEE
1313
+ metadata file. If so, the new DELEGATEE file becomes the trusted DELEGATEE
1314
+ file. If the new DELEGATEE metadata file is expired, abort the update
1315
1315
cycle, and report the potential freeze attack.
1316
1316
1317
1317
* ** 4.5.2.9** . If the current delegation is a multi-role delegation,
@@ -1325,7 +1325,7 @@ non-volatile storage as FILENAME.EXT.
1325
1325
1326
1326
* ** 4.5.2.11** . Otherwise, if the current delegation is a non-terminating
1327
1327
delegation, continue processing the next delegation, if any, by repeating
1328
- step 4.5 with DELEGATE as the current TARGET role. Stop the search, and
1328
+ step 4.5 with DELEGATEE as the current TARGET role. Stop the search, and
1329
1329
jump to step 5 as soon as a delegation returns a result.
1330
1330
1331
1331
** 5** . ** Verify the desired target against its targets metadata** .
0 commit comments