Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

PEP 458: fix technical choices and remove ambiguity #1203

Merged
merged 172 commits into from
Dec 2, 2019
Merged

PEP 458: fix technical choices and remove ambiguity #1203

Show file tree
Hide file tree
Changes from 98 commits
Commits
Show all changes
172 commits
Select commit Hold shift + click to select a range
8c9c212
Fixing link to [81]
JustinCappos Oct 3, 2019
2fa11b3
clarified that filenames can be relative or absolute
mnm678 Oct 4, 2019
d656e3c
Addressing the frequency of updates issue...
JustinCappos Oct 4, 2019
4296723
talk about managing online keys
trishankatdatadog Oct 4, 2019
fb87018
Fixing link to [81]
JustinCappos Oct 3, 2019
e6ea13f
Addressing the frequency of updates issue...
JustinCappos Oct 4, 2019
7426e7b
First cut at revoking trust text
JustinCappos Oct 4, 2019
57abcb1
more update related changes.
JustinCappos Oct 4, 2019
2be8b84
Garbage collection initial text. Needs more work.
JustinCappos Oct 4, 2019
7d1c235
Update pep-0458.txt
trishankatdatadog Oct 7, 2019
3f3e8c3
Update pep-0458.txt
trishankatdatadog Oct 7, 2019
ddbf2aa
discuss offline key ceremony
trishankatdatadog Oct 7, 2019
6fa6ab5
Merge remote-tracking branch 'upstream/master'
trishankatdatadog Oct 7, 2019
9da22de
update metadata scalability
trishankatdatadog Oct 7, 2019
4c3503a
changed minilock example to yubikey
mnm678 Oct 4, 2019
f9ba905
Merge pull request #2 from mnm678/yubikey
lukpueh Oct 8, 2019
5d2cadd
Update section about consistent snapshots
lukpueh Oct 8, 2019
4e684a9
Update link to client updater workflow
lukpueh Oct 8, 2019
7ca5b03
Merge pull request #7 from lukpueh/update-client-workflow-ref
lukpueh Oct 8, 2019
5279755
Merge pull request #6 from lukpueh/consistent-snapshot
lukpueh Oct 9, 2019
7975c2f
Merge pull request #5 from trishankatdatadog/trishankatdatadog/metada…
JustinCappos Oct 9, 2019
39c73df
Merge pull request #3 from mnm678/relative_files
JustinCappos Oct 9, 2019
0980fc4
clarify
trishankatdatadog Oct 9, 2019
2bf2c95
Merge pull request #4 from trishankatdatadog/trishankatdatadog/online…
JustinCappos Oct 9, 2019
0858bce
updated image
mnm678 Oct 4, 2019
00aab96
updated description to explain that bins uses an offline key
mnm678 Oct 4, 2019
b46c4c4
bins role should be offline, bin-n roles online
mnm678 Oct 8, 2019
f06d908
Update pep-0458.txt
mnm678 Oct 9, 2019
dfb86e6
Apply suggestions from code review
mnm678 Oct 9, 2019
8e30797
refer to bins roles as bin-n
mnm678 Oct 9, 2019
4d1e05c
Merge pull request #1 from mnm678:bins_offline
lukpueh Oct 10, 2019
b3d7d90
Add newline and indentation to fix pep2html errors
lukpueh Oct 10, 2019
4c57d8b
Disambiguate delegated target roles
lukpueh Oct 10, 2019
9b1dcef
Clarify roles in Definitions section
lukpueh Oct 10, 2019
797306a
Fix misc spelling
lukpueh Oct 10, 2019
50c7219
replace reference to RSA with ED25519 and fix surrounding text
mnm678 Oct 10, 2019
d2698b2
update image to show bin N
mnm678 Oct 10, 2019
3fd1a15
add brief description of tuf version management
mnm678 Oct 10, 2019
7ef8509
Merge pull request #9 from mnm678/rsa_to_ed25519
JustinCappos Oct 10, 2019
adacaa5
Merge pull request #10 from mnm678/update_image
trishankatdatadog Oct 10, 2019
585a698
Merge branch 'master' into disambiguate-bins
trishankatdatadog Oct 10, 2019
7eec75b
Merge branch 'master' of https://github.com/secure-systems-lab/peps i…
mnm678 Oct 10, 2019
648d503
remove details about version management
mnm678 Oct 10, 2019
a0d89b3
fix whitespace
mnm678 Oct 10, 2019
c5e6ee9
Add new coauthors to PEP 458
trishankatdatadog Oct 10, 2019
8db5745
Fix #13
trishankatdatadog Oct 10, 2019
b658780
clarifications
trishankatdatadog Oct 10, 2019
83b4459
Merge pull request #16 from secure-systems-lab/trishankatdatadog-patch-1
JustinCappos Oct 11, 2019
c8b0657
Refine roles disambiguation
lukpueh Oct 11, 2019
bc60065
Merge pull request #8 from lukpueh/disambiguate-bins
lukpueh Oct 11, 2019
7b71fab
Fix link for detailed workflows
joshuagl Oct 11, 2019
7c21271
simple clarification
joshuagl Oct 11, 2019
95157d3
Emphasise the need to be familiar with the TUF spec
joshuagl Oct 11, 2019
68a7826
Clarify that targets file paths must be relative
lukpueh Oct 11, 2019
7c670d8
Apply suggestions from code review
joshuagl Oct 11, 2019
7b5ef02
Merge pull request #17 from joshuagl/joshuagl/tweaks
trishankatdatadog Oct 11, 2019
73e9d8e
Update pep-0458.txt
lukpueh Oct 11, 2019
c556e4e
Merge pull request #18 from lukpueh/clarify-targets-paths
trishankatdatadog Oct 11, 2019
61f94d5
explain why this pep is backwards compatible
mnm678 Oct 11, 2019
0c20efe
Merge pull request #11 from mnm678/version_management
trishankatdatadog Oct 11, 2019
bb86867
talk about when to double number of bins
trishankatdatadog Oct 15, 2019
fbc326b
Fixing #24
JustinCappos Oct 15, 2019
03d6334
LD line edits 1015
jhdalek55 Oct 15, 2019
e359947
Update pep-0458.txt
JustinCappos Oct 16, 2019
d37029b
Update pep-0458.txt
JustinCappos Oct 16, 2019
fa1ab4f
Update pep-0458.txt
JustinCappos Oct 16, 2019
b1f1cb0
Update pep-0458.txt
JustinCappos Oct 16, 2019
7fc7095
Merge pull request #31 from secure-systems-lab/JustinCappos-24-fix
lukpueh Oct 16, 2019
0eee181
Merge branch '1st-draft' into ldPEPproof1015
trishankatdatadog Oct 16, 2019
a04d0e3
Update pep-0458.txt
jhdalek55 Oct 16, 2019
35c33a9
Update pep-0458.txt
jhdalek55 Oct 16, 2019
9d59deb
Merge pull request #33 from secure-systems-lab/ldPEPproof1015
trishankatdatadog Oct 16, 2019
b407046
Add Lois to authors
trishankatdatadog Oct 16, 2019
7826d7a
keep @lukpueh and @mnm678 happy
trishankatdatadog Oct 17, 2019
504841a
PEP 480: drop 'Appendix B: Extension to the Minimum Security Model'
joshuagl Oct 16, 2019
75bd856
PEP 458: clarify that we are recommending Ed25519
joshuagl Oct 16, 2019
24dea57
Merge pull request #29 from trishankatdatadog/trishankatdatadog/doubl…
trishankatdatadog Oct 17, 2019
f31c936
Merge pull request #32 from joshuagl/joshuagl/sig-alg
trishankatdatadog Oct 17, 2019
f054c2b
Merge pull request #35 from joshuagl/joshuagl/appendixb
trishankatdatadog Oct 17, 2019
9353b38
PEP 458: clarify snapshot metadata compression
joshuagl Oct 16, 2019
f6f77d3
Merge pull request #30 from joshuagl/joshuagl/compress
lukpueh Oct 17, 2019
7cd6f5f
talk about when to double number of bins
trishankatdatadog Oct 15, 2019
e87eb1c
keep @lukpueh and @mnm678 happy
trishankatdatadog Oct 17, 2019
7a58323
PEP 458: note that changes to num bins are transparent to client
joshuagl Oct 17, 2019
b18f431
Merge pull request #37 from joshuagl/joshuagl/bins
lukpueh Oct 17, 2019
0f06b16
PEP 458: Add Joshua Lock to authors list
joshuagl Oct 17, 2019
ed00545
Merge pull request #39 from joshuagl/joshuagl/authors
lukpueh Oct 17, 2019
b1873bf
Clarify targets delegation tree
lukpueh Oct 17, 2019
df1af80
Merge pull request #40 from lukpueh/clarify-targets-delegation
JustinCappos Oct 17, 2019
b975566
Merge branch 'master' into 1st-draft
trishankatdatadog Oct 17, 2019
c738ff6
Merge pull request #41 from trishankatdatadog/1st-draft
trishankatdatadog Oct 17, 2019
0678039
fix #36 and #38
trishankatdatadog Oct 17, 2019
c3fdeb8
Merge pull request #42 from secure-systems-lab/trishankatdatadog/appe…
JustinCappos Oct 17, 2019
92fe340
simplify the table and explain the security when the online keys are …
mnm678 Oct 17, 2019
91a35fa
Use noun instead of pronoun for clarity
lukpueh Oct 18, 2019
bb5c7b1
Update pep-0458.txt
mnm678 Oct 18, 2019
4c23511
collapse table columns and remove duplicated text
mnm678 Oct 18, 2019
f4761d0
Merge pull request #43 from mnm678/compromise_analysis
JustinCappos Oct 18, 2019
92e9055
clarify what causes the cost for new users
mnm678 Oct 23, 2019
76c4710
clarify cryptographic hashing algos
trishankatdatadog Oct 23, 2019
e6e5329
PEP 458: update references
joshuagl Oct 24, 2019
089bbf5
Update pep-0458.txt
mnm678 Oct 24, 2019
7dd4f8e
add primarily
mnm678 Oct 24, 2019
8ef0b5c
add possibility of using SHA-3
trishankatdatadog Oct 24, 2019
ad8ce2f
Merge pull request #50 from mnm678/cost_for_new_users
trishankatdatadog Oct 24, 2019
7a372f2
clarify choice of algos
trishankatdatadog Oct 24, 2019
6d71d9b
concretely specify all algos
trishankatdatadog Oct 24, 2019
ff68ed1
fix link
trishankatdatadog Oct 24, 2019
a468d50
clarify
trishankatdatadog Oct 24, 2019
dbd3b87
include tables for calculating metadata overheads
trishankatdatadog Oct 24, 2019
8ef769f
Merge pull request #53 from joshuagl/joshuagl/references
trishankatdatadog Oct 24, 2019
ccc8e3d
PEP 458: typo
joshuagl Oct 16, 2019
d3c738c
PEP 458: clarify some steps of the offline key ceremony
joshuagl Oct 22, 2019
0012036
PEP 458: remove references to target files in offline key ceremony
joshuagl Oct 24, 2019
39d1e33
PEP 458: mention one-time init to create and sign bin-n metadata
joshuagl Oct 24, 2019
558e714
Revise Producing Consistent Snapshots section
lukpueh Oct 24, 2019
4d5cbb4
Revise Cleaning up old metadata section
lukpueh Oct 25, 2019
0413709
Update pep-0458.txt
trishankatdatadog Oct 25, 2019
6f55ea4
Address most Trishank's review comments
lukpueh Oct 25, 2019
a096376
slightly more realistic numbers
trishankatdatadog Oct 25, 2019
7686bea
Merge branch 'trishankatdatadog/metadata-overhead-calculations' of gi…
trishankatdatadog Oct 25, 2019
bc1dc77
Merge pull request #55 from secure-systems-lab/trishankatdatadog/meta…
trishankatdatadog Oct 25, 2019
55472ca
Merge branch '1st-draft' into trishankatdatadog/hashing-algos
trishankatdatadog Oct 25, 2019
1503696
clarify
trishankatdatadog Oct 25, 2019
7532a51
Merge pull request #51 from secure-systems-lab/trishankatdatadog/hash…
trishankatdatadog Oct 25, 2019
8800690
Merge pull request #52 from joshuagl/joshuagl/ceremony
trishankatdatadog Oct 25, 2019
c7020e4
Merge branch 'revise-producing_consistent_snapshots' of git://github.…
trishankatdatadog Oct 25, 2019
0e92596
fix minor typo
trishankatdatadog Oct 25, 2019
5db64eb
edits and improvements
trishankatdatadog Oct 25, 2019
6512897
Merge branch 'lukpueh-revise-producing_consistent_snapshots' into 1st…
trishankatdatadog Oct 25, 2019
0e50ff8
Merge branch '1st-draft' of github.com:secure-systems-lab/peps into 1…
trishankatdatadog Oct 25, 2019
9ea6913
fix stupid bugs
trishankatdatadog Oct 25, 2019
786ae23
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
f75aa8d
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
2ab1c16
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
a544222
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
16b67a9
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
e3ae8fb
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
8508d53
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
d178c5b
Update pep-0458.txt
trishankatdatadog Oct 31, 2019
56e4bf7
PEP 458: make pip verification disabling option more evocative
joshuagl Nov 5, 2019
72fe3fd
PEP 458: add additional acknowledgements
joshuagl Nov 5, 2019
502adb2
PEP 458: note the reasoning behind a long option to disable TUF
joshuagl Nov 6, 2019
738622f
Merge pull request #62 from joshuagl/joshuagl/ver
trishankatdatadog Nov 6, 2019
d6b5c6f
Revise target file related terminology
lukpueh Nov 7, 2019
976c826
Update additional repository files section
lukpueh Nov 7, 2019
337a9ff
Refine distribution file definition
lukpueh Nov 7, 2019
9df7a96
Mention data deduplication for target file copies
lukpueh Nov 7, 2019
526f64b
Merge pull request #64 from lukpueh/clarify-targets-on-disk
trishankatdatadog Nov 7, 2019
940ea4b
Merge pull request #63 from lukpueh/revise-glossary
lukpueh Nov 7, 2019
cdd3a0e
update metadata overhead
trishankatdatadog Nov 7, 2019
c16b3fb
Merge pull request #65 from secure-systems-lab/trishankatdatadog/upda…
JustinCappos Nov 7, 2019
12b8a5e
remove sha256 and redo metadata overhead calculations
mnm678 Nov 20, 2019
9b3fd4a
add description of version number scalability
mnm678 Nov 20, 2019
534f946
Update pep-0458.txt
mnm678 Nov 20, 2019
d0deb7a
fix typos
mnm678 Nov 20, 2019
9c12c3c
Update pep-0458.txt
mnm678 Nov 21, 2019
7939f6e
Merge pull request #71 from mnm678/one_hash_alg
lukpueh Nov 22, 2019
9bfcef8
Replace tuf roles overview image with text table
lukpueh Nov 21, 2019
2dbe7be
Change tuf role table caption from figure to table
lukpueh Nov 21, 2019
b6f3608
Rename pep-0458-2.png -> pep-0458-1.png
lukpueh Nov 21, 2019
1374e1c
Update overview of tuf role table
lukpueh Nov 21, 2019
8b17d9f
Merge pull request #73 from lukpueh/table-to-texttable
lukpueh Nov 22, 2019
e3a993c
Update metadata calc in text after removing sha256
lukpueh Nov 22, 2019
af5c9bd
Merge pull request #74 from lukpueh/fix-metadata-calc
trishankatdatadog Nov 22, 2019
e48667b
explain snapshot revokation
mnm678 Nov 22, 2019
b5d8c83
Add padding to fix malformed text table
lukpueh Nov 25, 2019
bbbf843
Update "Producing Consistent Snapshots"
lukpueh Nov 22, 2019
6b080bd
Update pep-0458.txt
mnm678 Nov 25, 2019
6584424
Clarify that an 8 byte integer is not required and reword the version…
mnm678 Nov 25, 2019
3676031
Merge pull request #72 from mnm678/version_scalability
lukpueh Nov 26, 2019
dfbb24e
Merge pull request #75 from lukpueh/refine-producing-snapshots
JustinCappos Nov 26, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified pep-0458-2.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file removed pep-0458-3.png
View file
Open in desktop
Binary file not shown.
Loading