Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add TAP introducing snapshot Merkle trees #125

Merged
merged 13 commits into from
Mar 1, 2021
Merged

Add TAP introducing snapshot Merkle trees #125

merged 13 commits into from
Mar 1, 2021

Commits on Feb 3, 2021

  1. Add initial draft of tap introducing snapshot merkle trees 

    Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    624bcba View commit details
    Browse the repository at this point in the history

  2. Use repository instead of registry 

    The TUF spec uses the term repository to refer to the server that
stores updates.

Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    99a3a79 View commit details
    Browse the repository at this point in the history

  3. Add link to tap 11 

    Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    5d579ca View commit details
    Browse the repository at this point in the history

  4. Snapshot holds targets metadata information, not targets information 

    Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    1d22fba View commit details
    Browse the repository at this point in the history

  5. Update security analysis for snapshot merkle TAP 

    Add attack descriptions and comparison to the existing TUF specification

Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    e930054 View commit details
    Browse the repository at this point in the history

  6. Simplify the abstract for snapshot merkle tap 

    Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    db0c229 View commit details
    Browse the repository at this point in the history

  7. Clarify client verification and auditing 

    Add clarifications based on feedback on the pr.

Signed-off-by: marinamoore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    5655479 View commit details
    Browse the repository at this point in the history

  8. Apply edits for clarity from code review 

    Co-authored-by: Joshua Lock <jlock@vmware.com>
    @mnm678 @joshuagl
    mnm678 and joshuagl committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    f7ef3ab View commit details
    Browse the repository at this point in the history

  9. Add clarifications based on review 

    This commit adds clarifications to:
* The size of snapshot merkle metadata
* Information included in the merkle metadata
* Fast forward attack recovery

Signed-off-by: Marina Moore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    82891d5 View commit details
    Browse the repository at this point in the history

  10. Assign TAP number to Snapshot Merke Tree TAP 

    Signed-off-by: Marina Moore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    83f989f View commit details
    Browse the repository at this point in the history

  11. Add summary to security analysis 

    Add a quick comparison to the existing specification
to each section of the security analysis to make it
clear what the differences are with and without auditors.

Signed-off-by: Marina Moore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    2319f9c View commit details
    Browse the repository at this point in the history

  12. Condense the abstract 

    Credit to @joshuagl for helping with the text here.
This commit makes the abstract shorter and more in line
with the requirements of TAP 1.

Signed-off-by: Marina Moore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    32d214b View commit details
    Browse the repository at this point in the history

  13. Add section for client interaction with auditors 

    Add a section that describes a few options for how clients
can verify that a Merkle tree has been verified by an auditor.

Signed-off-by: Marina Moore <mnm678@gmail.com>
    @mnm678
    mnm678 committed Feb 3, 2021
    Configuration menu
    Copy the full SHA
    b4f7f80 View commit details
    Browse the repository at this point in the history