@@ -1259,55 +1259,55 @@ non-volatile storage as FILENAME.EXT.
12591259 * ** 4.5.2** . Otherwise, recursively search the list of delegations in order
12601260 of appearance.
12611261
1262- * ** 4.5.2.1** . Let DELEGATE denote the current target role TARGETS is
1262+ * ** 4.5.2.1** . Let DELEGATEE denote the current target role TARGETS is
12631263 delegating to.
12641264
12651265 * ** 4.5.2.2** . ** Fast-forward attack recovery.** If a threshold of
12661266 delegated targets keys for the current delegation are removed from the
1267- TARGETS metadata, delete the trusted DELEGATE metadata, if any, and the
1267+ TARGETS metadata, delete the trusted DELEGATEE metadata, if any, and the
12681268 previously trusted snapshot metadata.
12691269
12701270 * ** 4.5.2.3** . ** Check for a rollback attack via snapshot.** The version number of the
1271- DELEGATE metadata in the previous trusted snapshot metadata, if any, MUST
1271+ DELEGATEE metadata in the previous trusted snapshot metadata, if any, MUST
12721272 be less than or equal to its version number in the new trusted snapshot
12731273 metadata. If this is not the case, abort the update cycle, and report the
12741274 potential rollback attack.
12751275
1276- * ** 4.5.2.4** . ** Download the DELEGATE targets metadata file** , up to either
1276+ * ** 4.5.2.4** . ** Download the DELEGATEE targets metadata file** , up to either
12771277 the number of bytes specified in the snapshot metadata file, or some Z
12781278 number of bytes. The value for Z is set by the authors of the application
1279- using TUF. For example, Z may be tens of kilobytes. IF DELEGATE cannot be
1279+ using TUF. For example, Z may be tens of kilobytes. IF DELEGATEE cannot be
12801280 found, end the search and report the target cannot be found. If
12811281 consistent snapshots are not used (see Section 7), then the filename used
12821282 to download the targets metadata file is of the fixed form FILENAME.EXT
12831283 (e.g., delegated_role.json). Otherwise, the filename is of the form
12841284 VERSION_NUMBER.FILENAME.EXT (e.g., 42.delegated_role.json), where
1285- VERSION_NUMBER is the version number of the DELEGATE metadata file listed
1285+ VERSION_NUMBER is the version number of the DELEGATEE metadata file listed
12861286 in the snapshot metadata file. In either case, the client MUST write the
12871287 file to non-volatile storage as FILENAME.EXT.
12881288
12891289 * ** 4.5.2.5** . ** Check against snapshot metadata.** The hashes (if any), and
1290- version number of the new DELEGATE metadata file MUST match the trusted
1290+ version number of the new DELEGATEE metadata file MUST match the trusted
12911291 snapshot metadata, if any. This is done, in part, to prevent a mix-and-match
1292- attack by man-in-the-middle attackers. If the new DELEGATE metadata file
1292+ attack by man-in-the-middle attackers. If the new DELEGATEE metadata file
12931293 does not match, abort the update cycle, and report the failure.
12941294
1295- * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATE
1295+ * ** 4.5.2.6** . ** Check for an arbitrary software attack.** The new DELEGATEE
12961296 metadata file MUST have been signed by a threshold of keys specified in the
1297- TARGETS metadata file. If the new DELEGATE metadata file is not signed
1297+ TARGETS metadata file. If the new DELEGATEE metadata file is not signed
12981298 as required, abort the update cycle, and report the failure.
12991299
1300- * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATE metadata.**
1301- The version number of the trusted DELEGATE metadata file, if any, MUST be
1302- less than or equal to the version number of the new DELEGATE metadata
1303- file. If the new DELEGATE metadata file is older than the trusted
1304- DELEGATE metadata file abort the update cycle, and report the potential
1300+ * ** 4.5.2.7** . ** Check for a rollback attack on the DELEGATEE metadata.**
1301+ The version number of the trusted DELEGATEE metadata file, if any, MUST be
1302+ less than or equal to the version number of the new DELEGATEE metadata
1303+ file. If the new DELEGATEE metadata file is older than the trusted
1304+ DELEGATEE metadata file abort the update cycle, and report the potential
13051305 rollback attack.
13061306
13071307 * ** 4.5.2.8** . ** Check for a freeze attack.** The latest known time
1308- should be lower than the expiration timestamp in the new DELEGATE
1309- metadata file. If so, the new DELEGATE file becomes the trusted DELEGATE
1310- file. If the new DELEGATE metadata file is expired, abort the update
1308+ should be lower than the expiration timestamp in the new DELEGATEE
1309+ metadata file. If so, the new DELEGATEE file becomes the trusted DELEGATEE
1310+ file. If the new DELEGATEE metadata file is expired, abort the update
13111311 cycle, and report the potential freeze attack.
13121312
13131313 * ** 4.5.2.9** . If the current delegation is a multi-role delegation,
@@ -1321,7 +1321,7 @@ non-volatile storage as FILENAME.EXT.
13211321
13221322 * ** 4.5.2.11** . Otherwise, if the current delegation is a non-terminating
13231323 delegation, continue processing the next delegation, if any, by repeating
1324- step 4.5 with DELEGATE as the current TARGET role. Stop the search, and
1324+ step 4.5 with DELEGATEE as the current TARGET role. Stop the search, and
13251325 jump to step 5 as soon as a delegation returns a result.
13261326
13271327** 5** . ** Verify the desired target against its targets metadata** .
0 commit comments