uptane/uptane-standard

Issues

• Vulnerability: Monotonically increasing version numbers not checked for increasing property (from Univ. of Iowa report)

  #268 opened 2 months ago by Yasho-Bapat
  3

• Vulnerability: Time attestation tampering (from Univ. of Iowa report)

  #267 opened 2 months ago by Yasho-Bapat
  0

• Convert standard format to be compatible with the Docusaurus text

  #266 opened 2 months ago by plapczyn
  0

• Disabmiguate "report"

  #265 opened 3 months ago by hexsecs
  0

• How do we address the security issues introduced by the use of aftermarket ECUs?

  #200 opened 4 years ago by jhdalek55
  13

• link to standard on main README page is broken.

  #262 opened 10 months ago by JustinCappos
  0

• Potential Inconsistency in 2.1.0

  #256 opened a year ago by PhilPNguy
  4

• Terminology Usage in v2.1.0

  #259 opened a year ago by PhilPNguy
  1

• Approving the release of V.2.1.0

  #252 opened a year ago by jhdalek55
  17

• How does Uptane integrate with existing supply chain technologies?

  #222 opened 2 years ago by jhdalek55
  17

• Secure identifiers for hardware and software in vehicles

  #230 opened 3 years ago by jhdalek55
  8

• How do we handle government updates?

  #162 opened 5 years ago by pattivacek
  23

• 5.3.2.1 Requirement to peform time check

  #247 opened 2 years ago by RobAirbotics
  6

• Add references to TAP 13 (once it is accepted)

  #198 opened 2 years ago by pattivacek
  18

• Licensing for Uptane Standard

  #243 opened 2 years ago by jhdalek55
  4

• Must all Identity keys be unique?

  #244 opened 2 years ago by jhdalek55
  0

• Must all ECU identity keys be unique?

  #241 opened 2 years ago by jhdalek55
  4

• Requiring "Secure Time"

  #169 opened 2 years ago by allen-cain-tm
  20

• Must all private keys be unique?

  #174 opened 2 years ago by allen-cain-tm
  28

• Add a SECURITY.md security policy to uptane?

  #227 opened 2 years ago by hexsecs
  2

• Add a note about Uptane costs

  #223 opened 3 years ago by jhdalek55
  10

• Add recommendation that Uptane use some type of transport security

  #221 opened 3 years ago by jhdalek55
  6

• Add note about python-TUF's CVE-2021-41131

  #225 opened 3 years ago by mnm678
  3

• Unaddressed freeze attack (or denial of service) based on Director replay

  #202 opened 3 years ago by tkfu
  19

• Designating a Primary for Secondary ECUs in Multiple Primary Configuration

  #201 opened 3 years ago by jhdalek55
  17

• Build-time requirement of preinstalled full set of metadata

  #220 opened 3 years ago by pattivacek
  2

• Make slow retrieval attack prevention a SHALL

  #194 opened 3 years ago by mnm678
  8

• Change the requirement to verify that a downloaded image is the right size to a MUST

  #181 opened 3 years ago by jhdalek55
  7

• Standardizing the use of MUST and SHALL

  #214 opened 3 years ago by jhdalek55
  3

• Clarify threshold requirement

  #209 opened 4 years ago by mnm678
  4

• Securely requesting user consent to apply updates that must go through the cloud

  #206 opened 4 years ago by jhdalek55
  2

• Acting on attacks detected by a vehicle when communication with the cloud has been compromised

  #207 opened 4 years ago by jhdalek55
  2

• Complete Move of Glossary to Deployment Best Practices

  #204 opened 4 years ago by jhdalek55
  4

• Secondaries without secondary storage

  #186 opened 4 years ago by pattivacek
  18

• References to rejected TAP 5

  #189 opened 4 years ago by mnm678
  14

• Slow retrieval attack protection

  #190 opened 4 years ago by mnm678
  2

• Standard vs Standards

  #185 opened 4 years ago by pattivacek
  3

• Delegations: "target name must match"

  #187 opened 4 years ago by pattivacek
  2

• Standard Inconsistency

  #175 opened 4 years ago by allen-cain-tm
  5

• Device Report - Filename and Hash requirement

  #177 opened 4 years ago by cwaldren
  11

• Image verification procedure doesn't specify that the length should be checked

  #178 opened 4 years ago by tkfu
  5

• Deployment Considerations - CONDITIONALLY REQUIRED

  #170 opened 4 years ago by allen-cain-tm
  4

• Goals for Version 2.0.0

  #156 opened 4 years ago by jhdalek55
  5

• Update hash function examples

  #163 opened 5 years ago by zabbal
  6

• How should we handle updates that are location-focused?

  #161 opened 5 years ago by tkfu
  10

• Render unofficial release version and post to website

  #157 opened 5 years ago by tkfu
  1

• Does partial verification require Root metadata?

  #152 opened 5 years ago by pattivacek
  5

• Snapshot check for Targets metadata filenames

  #149 opened 5 years ago by pattivacek
  13

• How to prevent infinite root.json fetches?

  #153 opened 5 years ago by pattivacek
  2

• Bug: Standard currently requires all metadata to be downloaded on each update check

  #147 opened 5 years ago by tkfu
  8