Skip to content

Commit

Permalink
remove spurious NL
Browse files Browse the repository at this point in the history
  • Loading branch information
thomas-fossati authored Aug 28, 2024
1 parent e75174a commit 85267b9
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion draft-birkholz-cose-tsa-tst-header-parameter.md
Original file line number Diff line number Diff line change
Expand Up @@ -166,7 +166,6 @@ It is also assumed that the TSA is a trusted third party, meaning that the attac
In such a setting, any tampering with the COSE signer's clock does not have an impact because, once the timestamp is obtained from the TSA, it becomes the only reliable source of time.
However, it is possible for a denial of service to occur if the attacker can adjust the relying party's clock to a future time, which could disrupt the validation of the timestamp.


In CTT mode, an attacker could manipulate the unprotected header by removing the timestamp or replacing it with one of their choosing.
In this threat model, the signed COSE object should be securely wrapped in an envelope both during transit and at rest.

Expand Down

0 comments on commit 85267b9

Please sign in to comment.