|
12 | 12 |
|
13 | 13 | # Abstract |
14 | 14 |
|
15 | | -To optimize the snapshot metadata file size for large repositories, repositories |
16 | | -can use a snapshot Merkle tree to conceptually store version information about |
17 | | -all images in a single snapshot without needing to distribute this entire |
18 | | -snapshot to all clients. To do so, it puts version information for each targets |
19 | | -metadata file into a leaf of the Merkle tree, and distributes snapshot Merkle |
20 | | -files containing this leaf information and a path to the root of the Merkle tree. |
21 | | -Clients can then compare this information with a Merkle root provided in the |
22 | | -timestamp metadata. To prove that there has not been a reversion of the |
23 | | -snapshot Merkle tree when downloading an image, the client and third-party |
24 | | -auditors download the prior snapshot Merkle trees and check that the version |
25 | | -numbers did not decrease at any point. |
26 | | - |
27 | | -By replacing a single snapshot metadata file with individual snapshot Merkle |
28 | | -metadata files, this TAP reduces the metadata overhead for repositories with |
29 | | -large numbers of targets metadata files. It maintains the security protections |
30 | | -of the single snapshot metadata file in part through the use of third party |
31 | | -auditors that check for rollback attacks anywhere in the Merkle tree. |
32 | | - |
33 | | -The feature described in this TAP does not need to be implemented by all TUF |
34 | | -implementations. It is an option for any adopter who is interested in the |
35 | | -benefits provided by this feature, but may not make sense for implementations |
36 | | -with fewer target files. |
| 15 | +Snapshot metadata for repositories with a high number of targets |
| 16 | +metadata files (through significant use of delegations), can become |
| 17 | +prohibitively large. Due to the need to download the snapshot file on every |
| 18 | +update cycle, very large snapshot metadata files can become a significant |
| 19 | +overhead for TUF clients. |
| 20 | + |
| 21 | +This TAP proposes a method for reducing the size of snapshot metadata a client |
| 22 | +must download without significantly weakening the security properties of TUF. |
| 23 | + |
37 | 24 |
|
38 | 25 | # Motivation |
39 | 26 |
|
|
0 commit comments