@@ -1263,55 +1263,55 @@ non-volatile storage as FILENAME.EXT.
12631263 * ** 4.5.2** . Otherwise, recursively search the list of delegations in order
12641264 of appearance.
12651265
1266- * ** 4.5.2.1** . Let DELEGATE denote the current target role TARGETS is
1266+ * ** 4.5.2.1** . Let DELEGATEE denote the current target role TARGETS is
12671267 delegating to.
12681268
12691269 * ** 4.5.2.2** . ** Fast-forward attack recovery.** If a threshold of
12701270 delegated targets keys for the current delegation are removed from the
1271- TARGETS metadata, delete the trusted DELEGATE metadata, if any, and the
1271+ TARGETS metadata, delete the trusted DELEGATEE metadata, if any, and the
12721272 previously trusted snapshot metadata.
12731273
12741274 * ** 4.5.2.3** . ** Check for a rollback attack via snapshot.** The version number of the
1275- DELEGATE metadata in the previous trusted snapshot metadata, if any, MUST
1275+ DELEGATEE metadata in the previous trusted snapshot metadata, if any, MUST
12761276 be less than or equal to its version number in the new trusted snapshot
12771277 metadata. If this is not the case, abort the update cycle, and report the
12781278 potential rollback attack.
12791279
1280- * ** 4.5.2.4** . ** Download the DELEGATE targets metadata file** , up to either
1280+ * ** 4.5.2.4** . ** Download the DELEGATEE targets metadata file** , up to either
12811281 the number of bytes specified in the snapshot metadata file, or some Z
12821282 number of bytes. The value for Z is set by the authors of the application
1283- using TUF. For example, Z may be tens of kilobytes. IF DELEGATE cannot be
1283+ using TUF. For example, Z may be tens of kilobytes. IF DELEGATEE cannot be
12841284 found, end the search and report the target cannot be found. If
12851285 consistent snapshots are not used (see Section 7), then the filename used
12861286 to download the targets metadata file is of the fixed form FILENAME.EXT
12871287 (e.g., delegated_role.json). Otherwise, the filename is of the form
12881288 VERSION_NUMBER.FILENAME.EXT (e.g., 42.delegated_role.json), where
1289- VERSION_NUMBER is the version number of the DELEGATE metadata file listed
1289+ VERSION_NUMBER is the version number of the DELEGATEE metadata file listed
12901290 in the snapshot metadata file. In either case, the client MUST write the
12911291 file to non-volatile storage as FILENAME.EXT.
12921292
12931293 * ** 4.5.2.5** . ** Check against snapshot metadata.** The hashes (if any), and
1294- version number of the new DELEGATE metadata file MUST match the trusted
1294+ version number of the new DELEGATEE metadata file MUST match the trusted
12951295 snapshot metadata, if any. This is done, in part, to prevent a mix-and-match
1296- attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1296+ attack by man-in-the-middle attackers. If the new DELEGATEE metadata file
12971297 does not match, abort the update cycle, and report the failure.
12981298
1299- * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATE
1299+ * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATEE
13001300 metadata file MUST have been signed by a threshold of keys specified in the
1301- TARGETS metadata file. If the new DELEGATE metadata file is not signed
1301+ TARGETS metadata file. If the new DELEGATEE metadata file is not signed
13021302 as required, abort the update cycle, and report the failure.
13031303
1304- * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATE metadata.**
1305- The version number of the trusted DELEGATE metadata file, if any, MUST be
1306- less than or equal to the version number of the new DELEGATE metadata
1307- file. If the new DELEGATE metadata file is older than the trusted
1308- DELEGATE metadata file abort the update cycle, and report the potential
1304+ * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATEE metadata.**
1305+ The version number of the trusted DELEGATEE metadata file, if any, MUST be
1306+ less than or equal to the version number of the new DELEGATEE metadata
1307+ file. If the new DELEGATEE metadata file is older than the trusted
1308+ DELEGATEE metadata file abort the update cycle, and report the potential
13091309 rollback attack.
13101310
13111311 * ** 4.5.2.8** . ** Check for a freeze attack.** The latest known time
1312- should be lower than the expiration timestamp in the new DELEGATE
1313- metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1314- file. If the new DELEGATE metadata file is expired, abort the update
1312+ should be lower than the expiration timestamp in the new DELEGATEE
1313+ metadata file. If so, the new DELEGATEE file becomes the trusted DELEGATEE
1314+ file. If the new DELEGATEE metadata file is expired, abort the update
13151315 cycle, and report the potential freeze attack.
13161316
13171317 * ** 4.5.2.9** . If the current delegation is a multi-role delegation,
@@ -1325,7 +1325,7 @@ non-volatile storage as FILENAME.EXT.
13251325
13261326 * ** 4.5.2.11** . Otherwise, if the current delegation is a non-terminating
13271327 delegation, continue processing the next delegation, if any, by repeating
1328- step 4.5 with DELEGATE as the current TARGET role. Stop the search, and
1328+ step 4.5 with DELEGATEE as the current TARGET role. Stop the search, and
13291329 jump to step 5 as soon as a delegation returns a result.
13301330
13311331** 5** . ** Verify the desired target against its targets metadata** .
0 commit comments