~/talk

Using TUF to Mitigate Repository Compromises

on YouTube 41m
Talkat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 15:20· Room 32AB - San Diego Convention Center, Upper Level· [security]

speakers

name:Marina Moore
links:none on file
name:Justin Cappos
links:none on file

resources

video:https://youtu.be/Gag8RLgvEH4
slides:none on file

summary

TUF (The Update Framework) presents a concrete design to limit damage from repository compromises by using threshold signatures, periodic root key rotation (typical suggested lifetime six months to a year), and offline root keys stored in separate locations for recovery. It enforces separation of duties via cryptographic delegations so a compromised repository or a single stolen key can only affect a scoped subset of packages. Production uses include Notary, PyPI discussions (PEP 458/480), and vendor implementations at major cloud providers.

AI-written summary · about

chapters (26)

  1. 0:00Intro to TUF: Making Noise About a Silent Protector... Marina Moore and Justin Cappos
  2. 1:46Users were attacked via software updates
  3. 2:05Repository compromise: impact
  4. 3:59Focus: repository compromise
  5. 5:36Background: Keys
  6. 6:30Signing all metadata with an online key
  7. 7:54Design principles for TUF
  8. 8:23Separation of duties
  9. 9:58Threshold signatures
  10. 10:57Explicit & implicit revocation of keys
  11. 12:01Minimizing risk with offline keys
  12. 13:21No Key Sharing
  13. 15:46How to Setup TUF in Your Infrastructure
  14. 16:01Setup: Client
  15. 16:44Setup: Repository
  16. 17:05Setup: Developers
  17. 17:30Setup: Root key Setup offline root keys Store in separate locations Sign metadata using an offline machine
  18. 17:55Setup: Example Ongoing PyPI Deployment
  19. 18:20Maintaining TUF
  20. 18:34Maintenance: Developers
  21. 19:12Maintenance: Root key management
  22. 19:43Maintenance: What doesn't need work The repository actions are completely automated Client verification
  23. 20:06Impact of compromise
  24. 20:59What TUF doesn't do
  25. 22:17TUF Deployments
  26. 22:44How you can contribute • Python Reference Implementation

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.